US court convicts Russian politician's son for hacking

The son of a Russian lawmaker has been convicted on US charges of hacking into US businesses to steal and sell credit card numbers, costing financial institutions more than US$169 million (A$222 million).

Roman Seleznev, also known as 'Track2,' was found guilty by a federal jury in Seattle on 38 of 40 counts, including wire fraud and intentional damage to a protected computer, following an eight day trial.

The conviction of Seleznev, of Vladivostok, followed a 10-year-long investigation by the US Secret Service, the agency said. He was arrested in 2014 in the Maldives in what Russia at the time called a "kidnapping".

Seleznev, the son of Valery Seleznev, a member of the Russian parliament, is scheduled to be sentenced on 2 December. He faces a mandatory minimum sentence of four years in prison, his lawyer John Henry Browne said.

Browne said Seleznev, 32, plans to appeal and challenge what he called Seleznev's 'illegal arrest' in the Maldives, plus a ruling that allowed prosecutors to introduce evidence from a corrupted laptop seized at the time of his arrest.

"I don't know of any case that has allowed such outrageous behavior," Browne said.

Prosecutors said that from October 2009 to October 2013, Seleznev hacked into retail point-of-sale systems and installed malware to steal credit card numbers from businesses, including restaurants and pizza parlors in Washington state.

Prosecutors said Seleznev sold the credit card information on various "carding" websites. Buyers in turn used the card numbers for fraudulent purchases, they said, causing 3700 financial institutions to lose more than US$169 million.

In total, prosecutors said he stole and sold more than 2.9 million credit card numbers. His laptop, they said, contained more than 1.7 million stolen numbers, along with evidence linking him to various servers, email and transactions in the scheme.

Seleznev faces separate charges pending in federal courts in Nevada and Georgia.