A Miami man pleaded guilty to computer hacking in what prosecutors called the largest identity theft case in US history. Albert Gonzalez, 28, admitted he led an international ring that stole 40 million credit and debit card records from US retailers including TJX Cos., OfficeMax Inc. and BJ's Wholesale Club Inc. Gonzalez appeared in federal court in Boston under an agreement requiring him to serve 15 to 25 years in prison and forfeit more than $1.65 million. Sentencing is set for Dec. 8. “This is the largest and most costly identity theft in US history,” Assistant US Attorney Stephen Heymann told US District Judge Patti Saris. Authorities found the 40 million records on computers in Ukraine and Latvia involved in the ring, Heymann said. Gonzalez, a high school graduate, pleaded guilty to all 19 counts of an indictment in Boston and one count in an indictment in New York. He was indicted last month in Newark, New Jersey, where prosecutors accused him of stealing 130 million credit and debt card records. In the Boston case, Gonzalez admitted he and confederates targeted companies including TJX, which had $200 million in losses, as well as OfficeMax, BJ's, and Sports Authority Inc. Gonzalez, who was in custody in New York, agreed to have that case moved to Boston. In the New York case, he admitted targeting Dave & Buster's Inc. restaurant chain. Gonzalez, dressed in a light green prison outfit, answered dozens of questions from the judge at the 75-minute hearing. “He wants to put this behind him,” Gonzalez's attorney Rene Palomino said in an interview. “He's extremely remorseful for what he's done. If he could turn time back, he would. It's affected him and his family very much.” Gonzalez agreed to forfeit more than $1.65 million in US currency, a condominium in Miami, a blue 2006 BMW automobile, IBM and Toshiba laptop computers and related equipment, a Glock 27 firearm, a Nokia cell phone, a Tiffany diamond ring and three Rolex watches. In the Boston case, he pleaded guilty to one count of conspiracy, five of computer fraud, four of wire fraud, five of access device fraud and four of aggravated identify theft. In the New York case, he admitted one count of conspiracy. Heymann said the forfeiture is a “very modest amount compared to the very large number of corporations and individuals” who were victims.