A Brooklyn man pleaded guilty in U.S. District Court in Rochester to fraud for hacking into online accounts of Wegmans customers. U.S. Attorney Trini E. Ross announced Judge Charles Siragusa sentenced 24-year-old Maurice Sheftall to serve three years of probation and pay restitution totaling $41,441.
Assistant U.S. Attorney Meghan K. McGuire, who is handling the case, stated that in January 2021, Sheftall obtained the customer credentials, including logins and passwords, of more than 50 individuals who had accounts on www.wegmans.com. He then logged into the accounts and changed passwords and e-mail contact information, locking each customer out of his or her account. Sheftall then used the customers’ saved credit card information, without their knowledge, to order groceries and have those groceries delivered to himself and his associates.
Between January 22, 2021, and July 25, 2021, Sheftall intentionally defrauded Wegmans and approximately 50 customers by placing approximately 25 fraudulent orders, totaling approximately $9,297.05. Actual losses totaled $41,441, including reimbursement to customers, the purchase of credit monitoring for affected customers, and the purchase of dark web monitoring to determine where and how Sheftall obtained the customer account information he used to access the accounts.
The plea and sentencing are the result of an investigation by the Federal Bureau of Investigation, under the direction of Special Agent-in-Charge Matthew Miraglia.