(CNN) -- A Miami, Florida, man indicted earlier this month in the largest case of identity theft in U.S. history has agreed to plead guilty to 19 felony counts for his role in another massive credit-card data breach, according to a court document.
A motion filed Friday by federal prosecutors in Boston, Massachusetts, says Albert Gonzalez, 28, has agreed to serve 15 to 25 years for stealing data from more than 40 million credit cards owned by patrons of Sports Authority, OfficeMax, Barnes & Noble and other major national retailers.
The sentence is to be served concurrently with other sentences he may receive from pending identity theft cases in New Jersey and New York, the plea agreement says.
It also stipulates that Gonzalez forfeit at least $1.65 million in cash, as well as assets including three Rolex watches and a Tiffany diamond ring.
Gonzalez must formally plead guilty in federal court on or before September 11 to accept the plea agreement, according to Friday's motion.
Gonzalez has yet to reach a plea agreement in the record-breaking data breach for which he was recently indicted in New Jersey. He is in jail in New York, where he is awaiting trial for his alleged role in yet another hacking scheme, one that targeted the restaurant/arcade chain Dave & Buster's.
Gonzalez's attorney, Rene Palomino Jr., did not return calls for comment.
All About Identity Theft