'One-man cyber crime wave' who hacked top firms and sold data on dark web jailed

Grant West, 26, carried out cyber attacks on high street names including Sainsbury's, Asda, Uber, Argos and bookmakers Ladbrokes and Coral.

He obtained the email addresses of more than 160,000 people and then sent them phishing scams masquerading as Just Eat to get their personal data.

West, who used the online identity "Courvoisier", sold the information on the dark web, stashing his ill-gotten Bitcoin profits in online caches.

He was sentenced to a total of 10 years and eight months at Southwark Crown Court on Friday.

Judge Michael Gledhill described West as "a one-man cyber crime wave" and said that he had "secreted away" some of the £1.6 million worth of cryptocurrency which is unaccounted for.

He said: "Regrettably, as this case has demonstrated, security of information held electronically is at best poor.

"When such inadequate security is confronted with a criminal of your skills and ambition it is totally unfit for purpose and worthless.

"This case should be a wake-up call to customers, companies and the computer industry to the very real threat of cyber crime."

He added: "You have a deep and impressive knowledge of computers and if you had decided to use your abilities lawfully I have no doubt at all that you would have had a very successful career.

"Unfortunately you saw the potential of using your skills to make a great deal of money not lawfully but by crime, blatant crime and your crimes were highly sophisticated."

West's two-and-a-half year scam came to an end in September last year when he was arrested by officers in a first-class train carriage in the act of accessing the dark web.

He had been returning from a trip to visit his girlfriend and co-defendant Rachael Brooks in North Wales.

The couple have a young child together.

West, who was living in a caravan park in Sheerness in Kent, used the stolen email addresses to send out messages posing as Just Eat with offers of cash rewards in exchange for customers filling out a survey.

Respondents were asked to confirm personal emails and supply extra details in order to obtain the reward, which were then harvested by West.

The information, which included everything needed to make purchases online, was then advertised and sold to customers from his dark web shop.

He built up huge caches of Bitcoin and other cryptocurrency in online "wallets".

Police also found £25,000 in cash and a stash of cannabis when they raided his home last year.

The prosecution estimated that the total loss to customers and businesses was more than £1 million.

A total of £84,000 was fraudulently taken from compromised accounts held at Barclays, costing the bank more than £300,000 to remedy.

British Airways also suffered a £400,000 loss after Avios accounts were targeted.

Just Eat said no financial information was obtained in West's fraud, but pegged the cost of combating the scam at more than £200,000.

Brooks, of Denbigh, North Wales, was previously given a community order after she admitted using the details of two of West's victims to buy herself a £40 bikini online.

West previously admitted a string of charges including conspiracy to defraud, unauthorised modification of computer material, possession and supply of cannabis, possessing criminal property and money laundering.

He has a number of previous convictions, including drug offences and other frauds.

Anna Mackenzie, defending, said West has been a cannabis user since the age of 14 and suffers from low self-esteem, lack of confidence, anxiety and depression.

"He has expressed remorse and shame and acknowledges his irresponsibility, selfishness, greed and hunger to succeed," she said.

"He wishes to offer apologies to the victims and businesses affected by his actions."