Andrii Kolpakov, a 33-year-old Ukrainian hacker, was sentenced to 7 years in prison for his involvement in the activities of a cybercriminal gang called FIN7, known for stealing millions of credit and debit card data from across the U.S.

The Justice Department also said in a news release that Kolpakov was ordered to pay $2.5 million in restitution after pleading guilty to one count of wire fraud conspiracy and one count of computer hacking conspiracy.

Prior to his arrest in Spain in 2018, prosecutors said Kolpakov worked between 2016 and 2018 for FIN7, which disguised itself as a cybersecurity firm called “Combi Security,” where he rose to become a middle manager responsible for directing “a small team of hackers” who crack victims computer systems and train recruits to use FIN7′ s malicious tools.

For more information, read the original story in Reuters.