The Russian man charged with stealing credit card numbers from the now shuttered Broadway Grill is now accused of stealing up to 2 million credit card numbers far beyond Seattle and leading a large international hacking syndicate, according to the U.S. Attorney’s office.

On Tuesday a federal grand jury in Seattle returned a “second superseding” indictment on Roman Seleznev, charging him with an additional 11 counts related to hacking, stealing credit card information, and selling the numbers through “carding” sites.

UPDATE: Seleznev pleaded not guilty to the new charges. A trial date was scheduled for November.

UPDATE (10/3): The trial has been adjourned until May 2015.

In a press release, Seattle’s acting U.S. Attorney Annette Hayes said Seleznev was a leader in the international marketplace of stolen credit card numbers and even created a website to teach others how to do it. New information examined by the grand jury showed Seleznev was operating his criminal scheme right until he was apprehended in Russia, according to the press release.

Seleznev allegedly used severs around the world to conduct his operations and sold credit card numbers through the website “2pac.cc.” In a separate indictment in Nevada, Seleznev faces racketeering charges.

Seleznev was indicted in Seattle in 2011 but wasn’t taken into custody until July 5th. DOJ representatives wouldn’t say how the suspect was ultimately captured or how he ended up in Guam, his first stop in U.S. territory. The arrest of Seleznev, the son of a member of Russia’s Duma, set off international protest as his home nation called his seizure a kidnapping part of a string of disputes with the U.S. over cybercrime.

According to the 2011 indictment, Seleznev’s hack of the Broadway Grill point of sale system resulted in at least $1.7 million in losses to banks and credit card companies. Seleznev’s charges include five counts of bank fraud, eight counts of intentionally causing damage to a protected computer, eight counts of obtaining information from a protected computer, one count of possession of unauthorized access devices, and two counts of trafficking those devices. He also faces five counts of aggravated identity theft.