In the two-count indictment alleging conspiracy and conspiracy to engage in wire fraud, Gonzalez, AKA "segvec," "soupnazi" and "j4guar17" and the two others are charged with using a sophisticated hacking technique called an "SQL injection attack," which seeks to exploit computer networks by finding a way around the network's firewall to steal sensitive information. Gonzalez had previously been charged with swiping data related to 40 million credit cards from retailers including TJ Maxx.

The indictment alleges that beginning in October 2006, Gonzalez and his co-conspirators researched the credit and debit card systems used by their victims; devised a sophisticated attack to penetrate their networks and steal credit and debit card data; and sent that data to computer servers they operated in California, Illinois, Latvia, the Netherlands and Ukraine. If convicted, Gonzalez could face up to 20 years in prison for wire fraud conspiracy and an additional five years on the conspiracy charge, as well as a hefty fine. Gonzalez is currently in federal custody, DOJ said.