WASHINGTON | Two Russian intelligence agents and two hackers have been charged in a devastating breach at Yahoo that affected at least a half billion user accounts, the Justice Department said Wednesday in bringing the first case of its kind against Russian government officials.
The hack targeted the email accounts of Russian and U.S. officials, Russian journalists, and employees of financial services and other businesses, officials said.
“We will not allow individuals, groups, nation states or a combination of them to compromise the privacy of our citizens, the economic interests of our companies, or the security of our country,” said Acting Assistant Attorney General Mary McCord.
One of the defendants, Karim Baratov, has been taken into custody in Canada. Another, Alexey Belan, is on the list of the FBI’s most wanted cyber criminals and has been indicted multiple times in the U.S. It’s not clear whether he or the other two defendants who remain at large, Dmitry Dokuchaev and Igor Sushchin, will ever step foot in an American courtroom since there’s no extradition treaty with Russia. The indictment identifies Dokuchaev and Sushchin as officers of the Russian Federal Security Service, or FSB.
But, McCord said, “I hope they will respect our criminal justice system.”
The charges arise from a compromise of Yahoo user accounts that began in 2014. Though the Justice Department has previously charged Russian hackers — as well as hackers sponsored by the Chinese and Iranian governments — this is the first criminal case to so directly implicate the Russian government in cybercrime.
The announcement comes as federal authorities investigate Russian hacking in the presidential election. One of the defendants, Belan, was among the Russians sanctioned last year following those hacking efforts, though U.S. officials said the investigations were separate.
Yahoo didn’t disclose the 2014 breach until last September when it began notifying at least 500 million users that email addresses, birth dates, answers to security questions and other personal information may have been stolen.