Manhattan U.S. Attorney Announces Extradition Of Defendants Linked To Massive Network Intrusions At U.S. Financial Institutions, U.S. Brokerage Firms, A Major News Publication, And Other Companies In Furtherance Of Securities Fraud Scheme And Other Crimes
2016-06-09 · Press release
Preet Bharara, the United States Attorney for the Southern District of New York, Diego Rodriguez, Assistant Director-in-Charge of the New York Field Office of the Federal Bureau of Investigation (“FBI”), and David E. Beach, Special Agent in Charge of the U.S. Secret Service New York Field Office (“USSS”), announced today that GERY SHALON, a/k/a “Garri Shalelashvili,” a/k/a “Gabriel,” a/k/a “Gabi,” a/k/a “Phillipe Mousset,” a/k/a “Christopher Engeham,” and ZIV ORENSTEIN, a/k/a “Aviv Stein,” a/k/a “John Avery,” were extradited from Israel. SHALON and ORENSTEIN were arrested in July 2015 for charges arising out of SHALON’s orchestration of massive computer hacking crimes against U.S. financial institutions, brokerage firms, and financial news publishers, including the largest theft of customer data from a U.S. financial institution in history. SHALON is charged with committing these crimes with JOSHUA SAMUEL AARON, a/k/a “Mike Shields,” in furtherance of securities market manipulation schemes that SHALON and AARON perpetrated with defendant ORENSTEIN. SHALON, a Georgian and Israeli citizen, and ORENSTEIN, an Israeli citizen, arrived in the Southern District of New York last night and early this morning, respectively, and will be presented today in Manhattan federal court, before U.S. Magistrate Judge Kevin Nathaniel Fox.
Manhattan U.S. Attorney Preet Bharara said: “Gery Shalon and Ziv Orenstein, two of the alleged perpetrators of the cybercrime that we described at the time of their arrests as securities fraud on cyber steroids, have been successfully extradited from Israel to the United States. For the alleged hacks into numerous U.S. companies, including the largest theft of customer data from a U.S. financial institution in history, in furtherance of their securities fraud, Sharon and Orenstein will now face prosecution in a U.S. court.”
SHALON and ORENSTEIN were arrested by Israeli authorities in July 2015, pursuant to a provisional arrest warrant that was issued on the securities fraud charges in this case. AARON, a U.S. citizen, has yet to be arrested by U.S. authorities.
* * *
The charges in the Indictment against SHALON, 31, of Savyon, Israel, AARON, 31, a U.S. citizen who is believed to reside in Moscow, Russia, and ORENSTEIN, 40, of Bat Hefer, Israel, are included in the chart below. The maximum potential sentences listed below are prescribed by Congress and are provided here for informational purposes only, as any sentencing of the defendants will be determined by the judge.
Mr. Bharara praised the investigative work of the FBI and the United States Secret Service, and expressed his sincere gratitude to the Office of the State Attorney of the Israel Ministry of Justice’s Department of International Affairs and the Israel National Police, including its Cyber Unit - Lahav 433, for their support and assistance with the investigation and the extradition proceedings. He also thanked the Securities and Exchange Commission, Immigration and Customs Enforcement - Homeland Security Investigations, the Financial Industry Regulatory Authority, the National Credit Union Administration, the Office of International Affairs of the U.S. Department of Justice, the Financial Services Information Sharing and Analysis Center, which significantly aided the investigation by facilitating information-sharing among the victim institutions, and the U.S. Marshals Service, for their assistance in the extradition of the defendants.
The prosecution of this case is being overseen by the Office’s Complex Frauds and Cybercrime Unit. Assistant U.S. Attorneys Eun Young Choi and Sarah Lai are in charge of the prosecution. Assistant U.S. Attorney Edward Diskant of the Office’s Money Laundering and Asset Forfeiture Unit is in charge of the forfeiture aspects of the case.
The charges contained in the Indictment are merely accusations, and the defendants are presumed innocent unless and until proven guilty.
Count
Defendants
Charge
Maximum Prison Term
One
SHALON and AARON
Conspiracy to commit computer hacking
Five years
Two
SHALON and AARON
Computer hacking
Five years
Three
SHALON and AARON
Computer hacking
Five years
Four
SHALON, AARON, and ORENSTEIN
Conspiracy to commit securities fraud
Five years
Five
SHALON, AARON, and ORENSTEIN
Conspiracy to commit wire fraud: Securities Market Manipulation Scheme
20 years
Six
SHALON, AARON, and ORENSTEIN
Securities fraud
20 years
Seven
SHALON, AARON, and ORENSTEIN
Eight
SHALON, AARON, and ORENSTEIN
Nine
SHALON, AARON, and ORENSTEIN
10
SHALON, AARON, and ORENSTEIN
11
SHALON, AARON, and ORENSTEIN
12
SHALON, AARON, and ORENSTEIN
13
SHALON, AARON, and ORENSTEIN
Wire fraud
20 years
14
SHALON, AARON, and ORENSTEIN
Conspiracy to commit identification document fraud
15 years
15
SHALON, AARON, and ORENSTEIN
Aggravated identity theft
Mandatory two years
16
SHALON and ORENSTEIN
Unlawful internet gambling enforcement act conspiracy
Five years
17
SHALON and ORENSTEIN
Unlawful internet gambling enforcement act
Five years
18
SHALON and ORENSTEIN
Operation of illegal gambling business
Five years
19
SHALON and ORENSTEIN
Conspiracy to commit wire fraud: unlawful payment processing
20 years
20
SHALON
Conspiracy to operate an unlicensed money transmitting business
Five years
21
SHALON
Operation of an unlicensed money transmitting business
10 years
22
SHALON, AARON, and ORENSTEIN
Conspiracy to commit money laundering: Securities Market Manipulation Scheme
20 years
23
SHALON and ORENSTEIN
Conspiracy to commit money laundering: Internet Gambling and Payment Processing Schemes
20 years
- district_office
- usa_name
- event_type
- judge_name
- judge_title
- case_number
- max_penalty_text
- sentence_summary
- money_amounts
- crypto_assets
- statutes_json
- timeline_json
- press_release_url
- https://www.justice.gov/usao-sdny/pr/manhattan-us-attorney-announces-extradition-defendants-linked-massive-network
- extras_json
| participant_id | name | role | title | organization | location | age | nationality | status |
|---|---|---|---|---|---|---|---|---|
| 2558 | Preet Bharara | prosecutor | U.S. Attorney | U.S. Attorney's Office | New York | |||
| 2559 | Diego Rodriguez | investigator | Assistant Director-in-Charge | FBI | New York | |||
| 2560 | David E. Beach | investigator | Special Agent in Charge | U.S. Secret Service | New York | |||
| 2561 | Gery Shalon | defendant | Savyon, Israel | 31 | Georgian and Israeli | extradited | ||
| 2562 | Ziv Orenstein | defendant | Bat Hefer, Israel | 40 | Israeli | extradited | ||
| 2563 | Joshua Samuel Aaron | defendant | Moscow, Russia | 31 | U.S. citizen | indicted | ||
| 2564 | Kevin Nathaniel Fox | judge | U.S. Magistrate Judge | Manhattan federal court | New York | |||
| 2565 | Eun Young Choi | prosecutor | Assistant U.S. Attorney | U.S. Attorney's Office | New York | |||
| 2566 | Sarah Lai | prosecutor | Assistant U.S. Attorney | U.S. Attorney's Office | New York | |||
| 2567 | Edward Diskant | prosecutor | Assistant U.S. Attorney | U.S. Attorney's Office | New York |
| agency_id | agency_name | abbreviation | role | office_location | agents_mentioned | contribution |
|---|---|---|---|---|---|---|
| 1611 | U.S. Attorney's Office for the Southern District of New York | SDNY | prosecution | Southern District of New York | Overseeing prosecution and handling legal proceedings | |
| 1612 | Federal Bureau of Investigation | FBI | investigation | New York Field Office | Diego Rodriguez | Led investigation into hacking crimes and arrests |
| 1613 | U.S. Secret Service | USSS | investigation | New York Field Office | David E. Beach | Assisted in investigation and provided support |
| 1614 | Office of the State Attorney of the Israel Ministry of Justice’s Department of International Affairs | international legal assistance | Provided support and assistance in extradition | |||
| 1615 | Israel National Police | investigation | Assisted via Cyber Unit - Lahav 433 in investigation | |||
| 1616 | Securities and Exchange Commission | SEC | regulatory assistance | Provided assistance in the case | ||
| 1617 | Immigration and Customs Enforcement - Homeland Security Investigations | ICE-HSI | investigation | Assisted in the investigation | ||
| 1618 | Financial Industry Regulatory Authority | FINRA | regulatory assistance | Facilitated information-sharing among victim institutions | ||
| 1619 | National Credit Union Administration | NCUA | regulatory assistance | Provided assistance in the case | ||
| 1620 | Office of International Affairs of the U.S. Department of Justice | DOJ-OIA | international legal coordination | Assisted in extradition proceedings | ||
| 1621 | Financial Services Information Sharing and Analysis Center | FS-ISAC | information sharing | Aided investigation by facilitating information-sharing | ||
| 1622 | U.S. Marshals Service | USMS | extradition | Assisted in extraditing defendants to the U.S. |
| charge_id | charge_description | statute | severity | max_penalty | fine_amount | defendant | status | participant_id | cl_docket_id | count_num | is_1960 | verified_1960 | source | updated_at |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1327 | Conspiracy to commit computer hacking | Five years | SHALON and AARON | indicted | 0 | enrichment | ||||||||
| 1328 | Computer hacking | Five years | SHALON and AARON | indicted | 0 | enrichment | ||||||||
| 1329 | Computer hacking | Five years | SHALON and AARON | indicted | 0 | enrichment | ||||||||
| 1330 | Conspiracy to commit securities fraud | Five years | SHALON, AARON, and ORENSTEIN | indicted | 0 | enrichment | ||||||||
| 1331 | Conspiracy to commit wire fraud: Securities Market Manipulation Scheme | 20 years | SHALON, AARON, and ORENSTEIN | indicted | 0 | enrichment | ||||||||
| 1332 | Securities fraud | 20 years | SHALON, AARON, and ORENSTEIN | indicted | 0 | enrichment | ||||||||
| 1333 | Securities fraud | 20 years | SHALON, AARON, and ORENSTEIN | indicted | 0 | enrichment | ||||||||
| 1334 | Securities fraud | 20 years | SHALON, AARON, and ORENSTEIN | indicted | 0 | enrichment | ||||||||
| 1335 | Securities fraud | 20 years | SHALON, AARON, and ORENSTEIN | indicted | 0 | enrichment | ||||||||
| 1336 | Securities fraud | 20 years | SHALON, AARON, and ORENSTEIN | indicted | 0 | enrichment | ||||||||
| 1337 | Securities fraud | 20 years | SHALON, AARON, and ORENSTEIN | indicted | 0 | enrichment | ||||||||
| 1338 | Securities fraud | 20 years | SHALON, AARON, and ORENSTEIN | indicted | 0 | enrichment | ||||||||
| 1339 | Wire fraud | 20 years | SHALON, AARON, and ORENSTEIN | indicted | 0 | enrichment | ||||||||
| 1340 | Conspiracy to commit identification document fraud | 15 years | SHALON, AARON, and ORENSTEIN | indicted | 0 | enrichment | ||||||||
| 1341 | Aggravated identity theft | Mandatory two years | SHALON, AARON, and ORENSTEIN | indicted | 0 | enrichment | ||||||||
| 1342 | Unlawful internet gambling enforcement act conspiracy | Five years | SHALON and ORENSTEIN | indicted | 0 | enrichment | ||||||||
| 1343 | Unlawful internet gambling enforcement act | Five years | SHALON and ORENSTEIN | indicted | 0 | enrichment | ||||||||
| 1344 | Operation of illegal gambling business | Five years | SHALON and ORENSTEIN | indicted | 0 | enrichment | ||||||||
| 1345 | Conspiracy to commit wire fraud: unlawful payment processing | 20 years | SHALON, AARON, and ORENSTEIN | indicted | 0 | enrichment | ||||||||
| 1348 | Conspiracy to commit money laundering: Securities Market Manipulation Scheme | 20 years | SHALON, AARON, and ORENSTEIN | indicted | 0 | enrichment | ||||||||
| 1349 | Conspiracy to commit money laundering: Internet Gambling and Payment Processing Schemes | 20 years | SHALON and ORENSTEIN | indicted | 0 | enrichment | ||||||||
| 1346 | Conspiracy to operate an unlicensed money transmitting business | Five years | SHALON | indicted | 1 | enrichment | 2026-09-16T19:46:00+00:00 | |||||||
| 1347 | Operation of an unlicensed money transmitting business | 10 years | SHALON | indicted | 1 | enrichment | 2026-09-16T19:46:00+00:00 | |||||||
| 3411 | operate an unlicensed money transmitting business Five years 21 SHALON Operation of an unlicensed money transmitting bus | 1 | press | 2026-09-16T19:46:00+00:00 | ||||||||||
| 3412 | unlicensed money transmitting business Five years 21 SHALON Operation of an un | 1 | press | 2026-09-16T19:46:00+00:00 |
| fin_id | action_type | amount | currency | description | asset_type | defendant | status |
|---|---|---|---|---|---|---|---|
| 1299 | forfeiture | proceeds of the offenses | SHALON, AARON, and ORENSTEIN | pending |
| victim_id | victim_type | description | number_affected | loss_amount | geographic_scope | vulnerability_factors | impact_description |
|---|---|---|---|---|---|---|---|
| 392 | financial institution | U.S. financial institutions | U.S. | Suffered massive network intrusions and the largest theft of customer data in history, enabling securities fraud schemes. | |||
| 393 | financial institution | U.S. brokerage firms | U.S. | Targeted in network intrusions to facilitate securities fraud and market manipulation. | |||
| 394 | business | major news publication | U.S. | Subject to network intrusions as part of the hacking operations. | |||
| 395 | business | other companies | U.S. | Affected by network intrusions supporting securities fraud and payment processing schemes. |
| quote_id | quote_text | speaker_name | speaker_title | speaker_organization | quote_type | context | significance |
|---|---|---|---|---|---|---|---|
| 2674 | Gery Shalon and Ziv Orenstein, two of the alleged perpetrators of the cybercrime that we described at the time of their arrests as securities fraud on cyber steroids, have been successfully extradited from Israel to the United States. For the alleged hacks into numerous U.S. companies, including the largest theft of customer data from a U.S. financial institution in history, in furtherance of their securities fraud, Sharon and Orenstein will now face prosecution in a U.S. court. | Preet Bharara | United States Attorney for the Southern District of New York | U.S. Department of Justice | statement | Announcing the extradition of Gery Shalon and Ziv Orenstein | Highlights the severity of the cybercrimes and the significance of the extradition |
| theme_id | theme_name | description | significance | related_statutes | geographic_scope | temporal_aspects | stakeholders |
|---|---|---|---|---|---|---|---|
| 1839 | Computer Hacking | Massive network intrusions into U.S. financial institutions, brokerage firms, and financial news publishers, including the largest theft of customer data from a U.S. financial institution in history. | Enabled securities fraud and market manipulation schemes by exploiting stolen data. | International | Recent development | Law enforcement (FBI, USSS), financial institutions, victims | |
| 1840 | Securities Fraud | Market manipulation schemes using stolen data to execute securities fraud, including coordinated trading based on insider information. | Central to the charges and the primary criminal objective of the defendants' hacking activities. | International | Recent development | SEC, financial institutions, victims | |
| 1841 | Money Laundering | Conspiracies to launder proceeds from securities fraud and gambling schemes through illegal payment processing and unlicensed money transmission. | Critical to obscuring the illicit origins of funds and facilitating global criminal operations. | International | Recent development | Financial institutions, regulatory bodies, law enforcement | |
| 1842 | International Cooperation | Collaboration between U.S. and Israeli authorities to extradite defendants and investigate cross-border cybercrimes. | Essential for apprehending and prosecuting non-U.S. citizens involved in transnational crimes. | International | Recent development | U.S. and Israeli law enforcement, international agencies | |
| 1843 | Wire Fraud | Schemes involving fraudulent wire transfers and communications to execute securities manipulation and payment processing fraud. | Integral to the execution of broader financial crimes and part of the defendants' multi-faceted fraud network. | International | Recent development | Law enforcement, financial regulators | |
| 1844 | Unlawful Gambling and Payment Processing | Operation of illegal gambling businesses and unlicensed payment processing systems to launder money and evade regulations. | Provided additional revenue streams and infrastructure for the defendants' criminal enterprises. | International | Recent development | Financial regulators, law enforcement | |
| 1845 | Identity Theft and Document Fraud | Aggravated identity theft and conspiracy to create fake identification documents to conceal criminal identities and activities. | Used to evade detection and prosecution by masking the defendants' true identities. | International | Recent development | Law enforcement, victims | |
| 1846 | Unlicensed Money Transmitting | Operating an unlicensed money transmitting business to facilitate illegal financial transactions. | Part of the broader money laundering strategy to move illicit funds without regulatory oversight. | International | Recent development | Financial regulators, law enforcement |
CourtListener / RECAP
No linked CourtListener docket yet.