The accomplice of an alleged Israeli hacking mastermind was sentenced on Tuesday to five and a half years in prison after pleading guilty to operating an illegal bitcoin exchange suspected of laundering money for hackers and linked to a data breach at JPMorgan Chase & Co.
- Israelis charged in U.S. for 'breathtaking' hacking heist
- Two Israelis plead not guilty to massive hacking heist in New York court
- Three Israelis arrested in relation to JPMorgan hack, securities fraud
Anthony Murgio, 33, of Tampa, Florida, pleaded guilty on January 9 to three counts of conspiracy, including bank fraud and operating an unlicensed money transmitting business. The sentence was roughly half as long as prosecutors had sought.
Murgio and his co-conspirators were accused of processing millions of dollars from 2013 to 2015 into the virtual currency bitcoin through the unlicensed exchange Coin.mx.
The scheme is thought to have been run by the alleged owner of Coin.mx, Gery Shalon, who pleaded not guilty to U.S. charges after being extradited last June from Israel. In May, Shalon reportedly agreed to pay $403 million in a settlement with U.S. authorities. He was released from prison but was being kept within the United States on a travel ban until the money was paid.
Prosecutors said many transactions were conducted by victims of ransomware, a malicious software that locks up data unless people pay a “ransom” to unlock it. Cybercriminals often demand ransom paid in bitcoin.
The alleged schemes also involved the takeover of a since-liquidated New Jersey credit union to shield their activity.
“Mr. Murgio led an effort based on ambition and greed,” and constructed on a “pyramid of lies,” U.S. District Judge Alison Nathan in Manhattan said during the sentencing hearing.
Murgio unsuccessfully fought back tears and lost his composure several times in expressing “enormous regret” for his crimes, which the judge credited as genuine.
“I am wiser today than when the case began, and I am sorry for all the damage I caused to so many people,” Murgio said. “Believing what I was doing was OK did not make it OK.”
Nathan cited Murgio’s generosity to friends and support to his family in imposing a term below the 10 to 12 and a half years recommended by prosecutors and federal guidelines.
Murgio’s lawyer Brian Klein said he was pleased with the reduction, after telling the judge that Murgio had taken responsibility for his “grievous decisionmaking.”
In contrast, Assistant U.S. Attorney Eun Choi faulted Murgio’s dealings with ransomware victims, saying: “He exploited their desperation to personally profit from them.”
A hearing on restitution and forfeiture was set for September 1.
Murgio’s father, Michael, pleaded guilty in October to a charge of obstruction tied to the credit union.
Nine people have been criminally charged following an investigation into the JPMorgan breach, which exposed over 83 million accounts.
In March, a jury in Manhattan convicted Florida software engineer Yuri Lebedev and New Jersey pastor Trevon Gross of scheming to conceal Coin.mx’s activities from banks and regulators. They have yet to be sentenced.