Gonzalez faces life in prison if he is convicted of all the charges alleged in the Massachusetts indictment.
Also on Tuesday, indictments were unsealed in U.S. District Court for the Southern District of California in San Diego against alleged participants Maksym "Maksik" Yastremskiy of Kharkov, Ukraine, and Aleksandr "Jonny Hell" Suvorov of Sillamae, Estonia.
The two are charged with crimes related to the sale of the stolen credit card data that Gonzalez and others illegally obtained, as well as additional stolen credit card data.
Suvorov is charged with conspiracy to possess unauthorized access devices, possession of unauthorized access devices, trafficking in unauthorized access devices, identity theft, aggravated identity theft, and aiding and abetting. Yastremskiy is charged with trafficking in unauthorized access devices, identity theft, aggravated identity theft and conspiracy to launder monetary instruments.
An indictment against Hung-Ming Chiu and Zhi Zhi Wang, both of China, and a person known only by the online nickname "Delpiero," was also unsealed in San Diego Tuesday.
Chiu, Wang, and Delpiero are charged with conspiracy to possess unauthorized access devices, trafficking in unauthorized access devices, trafficking in counterfeit access devices, possession of unauthorized access devices, aggravated identity theft, and aiding and abetting.
Also in San Diego, Sergey Pavolvich of Belarus, and Dzmitry Burak and Sergey Storchak, both of Ukraine, were charged in a criminal complaint with conspiracy to traffic in unauthorized access devices.
The San Diego charges allege that Yastremskiy, Suvorov, Chiu, Wang, Delpiero, Pavolvich, Burak, and Storchak operated an international stolen credit and debit card distribution ring with operations from Ukraine, Belarus, Estonia, China, the Philippines, and Thailand. The indictments allege that each of the defendants sold stolen credit and debit card information. The indictment of Yastremskiy alleges that he made more than $11 million from this criminal activity.
These indictments and complaints are the result of a three-year undercover investigation conducted out of the San Diego Field Office of the U.S. Secret Service.
In May, Gonzalez, Suvorov, and Yastremskiy also were charged in a related indictment in the U.S. District Court for the Eastern District of New York.
The New York charges allege that the trio were engaged in a sophisticated scheme to hack into computer networks run by the Dave & Buster's restaurant chain, and stole credit and debit card numbers from at least 11 locations. Specifically, the indictment alleges that the defendants gained unauthorized access to the cash register terminals and installed packet sniffers on them.
At one restaurant location, the packet sniffer captured data for approximately 5,000 credit and debit cards, eventually causing losses of at least $600,000 to the financial institutions that issued cards, the DOJ said.
Gonzalez is currently being held in jail on the New York charges. Turkish officials apprehended Yastremskiy in July 2007 in Turkey when he traveled there on vacation. He has been jailed there since then, pending the resolution of related Turkish charges, and the United States has made a formal request for his extradition. At the request of the DOJ, Suvorov was apprehended by the German Federal Police in Frankfurt in March 2008 on the San Diego charges when he traveled there on vacation. He is currently in jail pending the resolution of extradition proceedings.