Chirag Patel, 38, most recently of Norfolk, Virginia, was sentenced on May 8, 2023, by United States District Judge G. Murray Snow to 51 months in prison, followed by three years of supervised release. He also was ordered to pay $87,522.25 in restitution. Patel pleaded guilty to Computer Fraud.

On numerous occasions between August 2017 and July 2020, Patel hacked into the Phoenix-based computers of an international hospitality company. Patel fraudulently transferred and redeemed customer reward points from the company’s customer loyalty program. He also stole credit card numbers and other personally identifying information (PII) from customers and loyalty program members, which were stored in the company’s computers.

Patel took screenshots of customers’ and members’ information, which included credit card numbers and other PII, and saved the screenshots to a Google Drive he controlled. In total, between August 2017 and July 2020, Patel stole and possessed more than 1,200 credit card numbers. Patel used some of the stolen credit card numbers to make unauthorized purchases and also tried to sell some of the stolen credit card numbers.

The Federal Bureau of Investigation conducted the investigation in this case. The United States Attorney’s Office, District of Arizona, National Security Section, Phoenix, handled the prosecution.