BOSTON (4/19/10)--The sixth--and last--U.S. defendant in the data breach of TJX Cos. was sentenced in a Boston court Thursday to five years, $100,000 fine and three years of supervised release. Damon Patrick Toey, 25, allegedly helped TJX hacker Albert Gonzalez breach the networks of several companies in 2007 and 2008, and sold stolen card data (Wired.com April 15). Toey, who earned about $80,000 for his role in the crimes, had faced a maximum of 22 years in prison. He cooperated with authorities, leading investigators to two servers in Eastern Europe and providing them the encyption keys to access evidence. Authorities found 16.3 million stolen card numbers on a Latvian server and another 27.5 million stolen numbers on a server in Ukraine. Toey also helped persuade Gonzalez to plead guilty to the hacking, said prosecutors. In March, Gonzalez was sentenced to three concurrent sentences, totaling 20 years in prison, for hacking TJX, Hannaford Brothers, Heartland Payment Systems and more. TJX's breach, along with other high-profile breaches, cost credit unions millions when they had to reissue cards that were compromised in the attacks.