Alleged serial hacker honed his skills early Living large in his old hometown

Published 5:00 am Monday, August 24, 2009

Accused hacker Albert Gonzalez grew up in this home in a working-class neighborhood in southwest Miami. Gonzalez has been charged with stealing more than 130 million credit card numbers, the largest such case ever reported.

MIAMI Years before his arrest in the nations largest credit card heist, Albert Gonzalez launched a bold plan from a computer in his high school library: hack into the government network of India.

By the time FBI agents descended on South Miami Senior High School, the quiet 17-year-old senior had already shattered the security systems and left his mark: offensive notes on government message boards.

The successful breach of a network across the world stunned school administrators, but showed Gonzalez was already demonstrating the skills that would define him as one of the most prolific hackers in U.S. history.

Now charged with stealing more than 130 million credit card numbers in a sweeping fraud case, the Miami native escaped punishment a decade ago when he tapped into Indian servers using two computers in his high school library.

All of a sudden the FBI was at the school, and they want two of the computers in the library, recounted South Miami High principal Thomas Shaw. This was really malicious stuff.

Humble roots, massive schemes

For Gonzalez, 28, the intrusion represented the beginning of a hacking career that prosecutors say would eventually touch the lives of millions of consumers across the country.

He has been charged three times since last year for masterminding massive schemes to steal credit and debit data from some of the nations largest retailers and credit card processors. Now known as the king of identity thieves, Gonzalez began dabbling with computers innocently as a young boy growing up in a working class neighborhood of Miami-Dade, say those who remember him.

At 8 years old, his parents, Maria and Alberto, bought him his first computer just as the Internet was maturing, and by the time he was 9, he was already figuring out how to remove viruses, said his attorney and longtime family friend Rene Palomino Jr.

He didnt go out and play football with his friends, Palomino said. He was always in front of his computer. His best friend was his computer.

During elementary school he grew increasingly fascinated with the intricacies of computers and honing the skills that would serve him for the next two decades.

While immersing himself in the developing technology of the 1990s, Gonzalez was spending much of his time alone, say several classmates.

He would be the type of guy that people dont really notice in class. The quiet, reserved and to-himself person, said Cynthia Barberena, 27. He was actually a very average guy. He wasnt popular. He was very quiet, very into his little group of friends.

Palomino said he first met Gonzalez when the youngster was serving as an altar boy at Principe de Paz, where his parents and older sister, Frances, also attended church.

But Gonzalezs growing interest in computers and the Internet began to alarm his parents, Palomino said. After putting him to sleep, at one or two in the morning, his mother would find him still on the computer, he said.

By the time he attended high school, he began taking computer classes, but he was far ahead of his classmates.

India incident

In his final year, he and two other students took their skills too far when they connected to the schools library computer masking their location and then managed to crack the computer network of the government of India.

It was kid stuff, Palomino said. It was just leaving ridiculous messages regarding their culture.

But Shaw said it was far from a prank. The FBI came to the school, asking for our computers two of them in the library, he said. We never had anything like this happen at the school.

What I remember is that they had to cancel checks over there because of what happened.

Palomino said Gonzalez wasnt charged with a crime at the time. They just told him, Stay away from your computer for six months.

By 1999, he had graduated near the top of his class and later moved to the New York area, where he met in Internet chat rooms the people who would eventually become his co-defendants.

By 2003, he was using the screen name soupnazi shuttling between South Florida and New York while carrying out what prosecutors would call systematic break-ins on computer systems up and down the East Coast through 2007, according to federal indictments.

On Monday, he broke records when he and two other unnamed defendants were indicted in a massive scheme to steal the credit cards of 130 million Americans the largest ever reported.

For those who remember Gonzalez in earlier years, the public image of a serial offender comes as a surprise.

I was amazed, said Barberena, Gonzalezs classmate. He was the kid that never got in trouble.

MIAMI BEACH, Fla. Nestled near a row of sultry, silvery-green palm trees and a 205-foot-long infinity pool, room 1508 at the National Hotel on South Beach is a portrait of Art Deco luxury. It is also where, on May 7, 2008, federal agents seized two computers, $22,000 in cash and a Glock 9 gun from a man known on the Internet as soupnazi.

His real name is Albert Gonzalez, and he was with his girlfriend when federal agents arrived. Just as the setting was not run-of-the-mill, neither was the arrest. Gonzalez was charged with hacking into business computer networks and stealing credit and debit card accounts and in an embarrassing twist, he had once been an informant for the U.S. Secret Service.

Gonzalezs lawyer, Rene Palomino Jr., wouldnt address the charges in detail, saying that the case is in a very delicate stage and that Gonzalez is trying to resolve it. The attorney said Gonzalez and federal prosecutors were close to reaching a plea deal in the New York and Massachusetts cases this week, before the New Jersey indictment was added.

Gonzalez didnt go to college. In 1999, he was charged with marijuana possession, though the matter was dismissed, and his computer savvy allowed him to get a job at a New Jersey firm, Palomino said. He didnt elaborate on what the position was.

Its unclear what transpired between the time Gonzalez got that job and his first federal arrest. In 2003, Gonzalez was arrested for hacking but not charged because authorities said he became an informant, helping the Secret Service hunt other hackers.

Over the next five years, authorities said, Gonzalez continued to hack into the computer systems of Fortune 500 companies even while providing assistance to the government. A judge allowed him to move from New Jersey back to Florida in 2004.

He lived lavishly from selling the data he stole, court records show. Gonzalez threw a $75,000 birthday party for himself, complained that he had to count $340,000 in 20-dollar bills by hand because his money counter broke and considered investing in a nightclub.

Marketplace