Regional Computer Forensics Laboratory National Program OfficeRCFL NPO logo
Regional Computer Forensics LaboratoryHomeContact Survey
Contact us

p: (703)985-3677
f: (703)985-3979
email: NPO@rcfl.gov


Contact your local RCFL laboratory

Join our mailing list:




12/9/10: Digital Evidence Section Assists “Operation Trident Breach" – A Joint Cybercrime Operation Conducted by the FBI and International Law Enforcement

According to an FBI press release, “Operation Trident Breach began in May 2009, when FBI agents in Omaha, Nebraska, were alerted to automated clearing house (ACH) batch payments to 46 separate bank accounts throughout the United States. Agents quickly realized the scope of the crime and partnered with local, state, and federal partners, cybercrime task forces, working groups, and foreign police agencies in the Netherlands, Ukraine, and the United Kingdom to bring those responsible to justice."

The international cyber gang targeted individuals, companies, municipalities, and churches by infecting their computers with malware. Common malware can take the form of viruses, worms, Trojan horses and spyware. In this instance, the thieves used the malware to capture passwords, account numbers, and other data to break into online banking accounts. This scheme resulted in the attempted theft of $220 million, with actual losses of $70 million from victims' bank accounts.

The FBI partnered with several international law enforcement agencies, and successfully disrupted the cybercrime operation which was active in several countries—resulting in numerous search warrants and arrests. RCFL Examiners assigned to the Philadelphia RCFL, Silicon Valley RCFL, and the San Diego RCFL, along with CART Examiners from the Milwaukee and Omaha Field Divisions, provided expert digital forensics support to investigators in Amsterdam and Russia, and collected approximately 12 terabytes of data (one terabyte is equivalent to the content of an academic research library. RCFL Unit Chief Bryan Tepper said, “Operation Trident Breach is a great example of how the RCFL Program is protecting not only the local communities where we operate, but the Nation, and in this case, citizens from around the world. We are very proud of the exceptional contributions made by the RCFL Examiners to this important investigation."

- end -