Security News > 2020 > November > Microsoft engineer stole $10M, used colleagues as scapegoats
Kvashuk used Microsoft Store test accounts while being a part of the company's Universal Store Team to steal about $10.1 million worth of CSV from Microsoft via unauthorized simulated purchases of products according to court documents.
After initially using his test account to illegally purchase CSV, Kvashuk switched to accounts created by some of his colleagues to hide his tracks and direct future investigations to the wrong people.
The accounts were used to buy the largest share of stolen CSV and, after flagging them, Microsoft found no evidence that the two employees who created them were involved in any way in the unauthorized CSV purchases.
Microsoft was later able to connect Kvashuk with the three fraudulent test accounts after he used redeemed funds to buy three GeForce GTX 1070 graphics cards and had them delivered to his apartment complex via FedEx, to a different unit and under a different name.
"Kvashuk's scheme involved lies and deception at every step. He put his colleagues in the line of fire by using their test accounts to steal CSV," prosecutors said.