Wegmans website hacker must pay $40K in restitution

The Brooklyn man who hacked into the Wegmans Food Market website and used customer credit card information to order nearly $10,000 in groceries for himself and his associates has been sentenced to to three years probation and ordered to pay more than $40,000 in restitution.

Maurice Sheftall, 24, was sentenced on Monday by U.S. District Judge Charles J. Siragusa after entering a guilty plea to fraud and related activity in connection with computers.

Sheftall must pay restitution of $41,441, which includes $9,297.05 for groceries as well as reimbursement for credit card monitoring for affected customers and dark web monitoring.

The breach of customer data took place in January of 2021. Sheftall obtained logins and passwords of more than 50 customers who had accounts on wegmans.com.

He then changed passwords and email information, locking out those customers from their own accounts, and used stored credit card information to order $9,297.05 worth of groceries with 25 fraudulent orders between Jan. 22 and July 25.

Assistant U.S. Attorney Meghan K. McGuire prosecuted the case. The plea and sentencing were the result of an investigation by the FBI under the direction of Special Agent-in-Charge Matthew Miraglia.

[email protected]/(585) 653-4020