Vladimir Levin (hacker)
Vladimir Leonidovitch Levin | |
|---|---|
| Born | Russia |
| Occupation | Programmer |
| Known for | 1994 Citibank cyber theft attempt |
Vladimir Leonidovitch Levin () is a Russian national recognized for his 1994 attempt to illicitly transfer $10.7 million through the computer systems of Citibank.
He was born into a Jewish family in Russia.
The widely reported account
Contemporary media portrayed Levin as a mathematician holding a biochemistry degree from the Saint Petersburg State Institute of Technology.
In 1994, Levin exploited the dial-up wire transfer platform used by several major corporate clients of Citibank (Financial Institutions Citibank Cash Manager) to access their accounts, redirecting funds to accounts managed by collaborators located in Finland, the United States, the Netherlands, Germany, and Israel.
Authorities apprehended three accomplices while they were withdrawing money in Tel Aviv, Rotterdam, and San Francisco. Their subsequent interrogations led law enforcement to Levin, who was employed as a programmer at AO Saturn, based in St. Petersburg. Nevertheless, Russia’s Constitution forbids the extradition of its citizens.
In March 1995, Levin was enticed to London and detained at Stansted Airport by Scotland Yard during a layover from Moscow. His legal team challenged the extradition request to the United States; however, the House of Lords dismissed this appeal in June 1997.
Levin was transferred to U.S. custody in September 1997 and prosecuted in the United States District Court for the Southern District of New York. Under a plea agreement, he confessed to conspiracy to defraud and theft amounting to US$3.7 million. In February 1998, he received a three-year prison sentence and was ordered to pay restitution totaling US$240,015. Citibank confirmed recovering all but approximately US$400,000 of the $10.7 million stolen.
In response to the security breach, Citibank introduced Dynamic Encryption Cards—physical devices used for authentication. The method by which Levin acquired access credentials remained unclear. Following his arrest, anonymous hacking groups based in St. Petersburg claimed that Levin lacked the expertise necessary to infiltrate Citibank’s systems independently and alleged that they sold him privileged network access for $100.
The disclosure ten years later
In 2005, an ex-member of the St. Petersburg hacker collective who identified himself as ArkanoiD published a statement on Provider.net.ru, a telecommunications industry website. Claiming participation in the original Citibank intrusion, he stated that Levin was not a scientist but rather an average system administrator who obtained pre-existing information on how to breach and exploit Citibank’s systems.
ArkanoiD emphasized that all interactions took place over the X.25 network rather than the Internet. In 1994, his group found that Citibank’s U.S.-based systems lacked adequate protection and spent several weeks remotely mapping the network architecture. They tested various system utilities (including installing games) without triggering detection mechanisms. The group had no intention of theft for personal benefit and voluntarily ceased their activities. Subsequently, one member reportedly sold critical access data to Levin for around $100.