Damon Patrick Toey, 28, the last currently captured hacker who took part in the majority of major card security breaches over the last 10 years, has been sentenced to five years in prison. He also received three years of supervised release and a $100,000 fine. The U.S. Attorney for the District of Massachusetts had recommended a sentence of six years.

Toey had been part of the group of hackers that Miami-based Albert Gonzalez gathered around him and used to hack retailers first through attacks on their point of sale networks and, later, through attacks on retailers' computer systems themselves. Card issuers, including credit unions, have paid tens of millions of dollars in costs to close and reissue cards compromised in the breaches.

Gonzalez pleaded guilty and received a sentence of 20 years for his role in the crimes.