Since last we looked in on the governments progress in prosecuting the miscreants that perpetrated the watershed TJX breach, there have been limited develoments. In early November authorities charged one Stephen Watt of New York with conspiracy for providing the wireless "sniffer" used to capture millions of credit card numbers as they traversed TJX's unsecured wireless network. If convicted, Watt could spend up to 5 years in prison and be required to pay up to $250,000 in penalties. My guess is he gets off with a much reduced sentence in exchange for providing further testimony against the ring leaders of the conspiracy.
More recently one of the perpetrators that prosecutors believe WAS one of the ring leaders was sentenced last week to 30 years in a Turkish prison on an unrelated cybercrime charge. Maksym Yastremskiy was convicted of hacking into about a dozen Turkish banks, extracting account information on depositors and selling credit card and other confidential information.
While the U.S. Justice Department had filed a request that that Mr. Yastremskiy be extradited to face charges in the TJX case, I'm thinking it might be easier and cheaper to just let him rot in a Turkish prison, which I can't imagine would be easy time. Unless they need Yastremskiy's testimony to convict Albert Gonzalez, I think U.S. interests are more than adequately served by allowing Mr. Yastremskiy to pay his debt to global society in Turkey.