StubHub Cybertheft Case Sees Guilty Plea

The Russian national in charge of a criminal hacking enterprise that stole nearly $1 million in tickets via online vendor StubHub has pleaded guilty. Vadim Polyakov is facing four to 12 years in prison after copping to a scheme that coordinated players from around the world to take over StubHub accounts, use accountholders’ credit cards to purchase high-value tickets and then sell said tickets to pocket the funds.

    Get the Full Story

    Complete the form to unlock this article and enjoy unlimited free access to all PYMNTS content — no additional logins required.

    yesSubscribe to our daily newsletter, PYMNTS Today.

    By completing this form, you agree to receive marketing communications from PYMNTS and to the sharing of your information with our sponsor, if applicable, in accordance with our Privacy Policy and Terms and Conditions.

    The most popular items on the block were Broadway tickets, Justin Timberlake, Jay-Z and Yankees games (behind the dugout). All in, Manhattan District Attorney Cyrus R. Vance Jr.’s office reports more than 1,000 StubHub accounts and 3,500 tickets worth at least $1.6 million were involved, including some tickets that went for nearly $1,000 apiece.

    So far, neither Polyakov’s attorneys or StubHub have any official comments. StubHub first learned of the issue when a wave of customer complaints rolled in. Polyakov was arrested while on vacation in Spain in 2014 and extradited to the U.S. over Russian objections. He is not the only party charged in the case. Nine other people around the world also were indicted in the case, though some have yet to be arrested. Others have pleaded not guilty.

    “Many foreign cybercriminals believe they can operate overseas with total impunity, but this case proves they can be held criminally responsible for their actions, which can have devastating consequences on thousands of victims at a time,” Vance said in a statement on Monday (June 20).

    The DA’s office further noted that account information that made the fraudulent infiltration of StubHub users’ computers possible was either gained from previous data breaches or through malware or keylogging software stored illicitly on a victim’s computer.