Queens Men Sentenced To Prison For Conspiring To Hack The Taxi Dispatch System At JFK Airport Publisher: U.S. Attorney's Office, Southern District of New York Date: 12 February 2024 Subjects: American Government , Crime, Taxicabs & Limousines

Damian Williams, the United States Attorney for the Southern District of New York, announced today that DANIEL ABAYEV was sentenced to four years in prison and PETER LEYMAN was sentenced to two years in prison for their roles in a scheme to hack the electronic taxi dispatch system (the “Dispatch System”) at John F. Kennedy International Airport (“JFK”).  ABAYEV and LEYMAN were both sentenced today before U.S. District Judge Paul A. Crotty.  On October 4 and October 30, 2023, respectively, LEYMAN and ABAYEV each pled guilty to one count of conspiring to commit computer intrusion.

U.S. Attorney Damian Williams said: “Daniel Abayev and Peter Leyman, allegedly assisted by Russian hackers, wrought havoc on JFK's electronic taxi dispatch system, impacting fair order and creating chaos for honest taxi professionals.  Their actions enabled up to 1,000 fraudulent taxi trips daily, underscoring the serious threat cyber hacking poses to critical infrastructure.  Through our collaborative efforts with law enforcement partners, their scheme was dismantled, and the defendants have been rightfully sentenced.”

According to the charging documents and other filings and statements made in court:[1]

From at least September 2019 through September 2021, ABAYEV and LEYMAN, who are U.S. citizens residing in Queens, New York, and ALEKSANDR DEREBENETC, a/k/a “Sasha Novgorod,” and KIRILL SHIPULIN, a/k/a “Kirill Russia,” who are Russian nationals residing in Russia, engaged in a scheme (the “Hacking Scheme”) to hack the Dispatch System at JFK.

At all relevant times, taxi drivers who sought to pick up a fare at JFK were required to wait in a holding lot at JFK before being dispatched to a specific terminal by the Dispatch System.  Taxi drivers were frequently required to wait several hours in the lot before being dispatched to a terminal and were dispatched in approximately the order in which they arrived at the holding lot.

Beginning in 2019, ABAYEV, LEYMAN, DEREBENETC, and SHIPULIN attempted various mechanisms to access the Dispatch System without authorization, including bribing someone to insert a flash drive containing malware into computers connected to the Dispatch System, obtaining unauthorized access to the Dispatch System via a Wi-Fi connection, and stealing computer tablets connected to the Dispatch System.  The members of the Hacking Scheme also sent messages to each other in which they explicitly discussed their intention to hack the Dispatch System.  For example, on or about November 10, 2019, ABAYEV messaged DEREBENETC in Russian: “I know that the Pentagon is being hacked[.].  So, can’t we hack the taxi industry[?]”

At various times between November 2019 and November 2020, the members of the Hacking Scheme successfully hacked the Dispatch System.  They used their unauthorized access to alter the Dispatch System and move specific taxis to the front of the line, thereby allowing drivers of those taxis to skip other taxi drivers waiting in the line.  ABAYEV and LEYMAN charged taxi drivers $10 each time they were advanced to the front of the line and transferred part of their profits to SHIPULIN and DEREBENETC.

ABAYEV was the leader of the Hacking Scheme and recruited the other participants.  ABAYEV and LEYMAN’s scheme resulted in large numbers of taxi drivers skipping the taxi line.  Over the course of the scheme, they enabled as many as 1,000 fraudulently expedited taxi trips a day.

DEREBENETC and SHIPULIN remain at large.

*                *                *

In addition to the prison term, ABAYEV, 47, and LEYMAN, 49, both of Queens, New York, were sentenced to three years of supervised release and each ordered to pay $161,858.26 in forfeiture and $3,456,169.50 in restitution.

Mr. Williams praised the outstanding work of the Port Authority Office of the Inspector General.  Mr. Williams also thanked Homeland Security Investigations for their assistance in the investigation.

The case is being prosecuted by the Office’s Complex Frauds and Cybercrime Unit. Assistant U.S. Attorneys Kevin Mead and Steven J. Kochevar are in charge of the prosecution.

[1] The entirety of text of the Indictment charging DEREBENETC and SHIPULIN and the description of the Indictment set forth herein constitute only allegations, and every fact described regarding DEREBENETC and SHIPULIN should be treated as an allegation.”

Nicholas Biase, Lauren Scarff
(212) 637-2600

Updated February 12, 2024

Press Release Number: 24-050