The court heard that it cost Earthlink nearly $1 million to detect and fight the phishing attempt, and he was ordered to pay a total of $1,002,885.58 to victims by US District Judge Christina Snyder.
"Goodin's sentence sends out a strong message to other hackers tempted to engage in phishing and identity theft that their criminal activities will not be tolerated by the authorities," said Graham Cluley, senior technology consultant for Sophos. "Phishing and other forms of identity theft are on the rise, and it's all too easy for Internet users to be duped into believing they are handing over their details to someone they can trust."