29 Oct 2013

Briton charged with ‘massive’ US computer hack

Lauri Love is charged with hacking into thousands of American computer systems, including those run by the Pentagon’s missile defence agency, Nasa and the US army.

Mr Love, 28, from Stradishall, Suffolk, and three unnamed conspirators from Australia and Sweden are alleged to have carried out the hack, according to a US grand jury indictment that has been made public.

They are accused of breaching the systems to steal “massive quantities” of confidential data, resulting in millions of dollars of losses.

Mr Love, the son of a Baptist minister, was arrested by officers from the UK’s National Crime Agency (NCA) under the computer misuse act and later charged by the US authorities in New Jersey.

‘Endangers security’

New Jersey district attorney, Paul Fishman, said: “As part of their alleged scheme, they stole military data and personal identifying information belonging to the servicemen and women. Such conduct endangers the security of our country and is an affront to those who serve”.

NCA spokesman Andy Archibald said: “Cyber-criminals should be aware that no matter where in the world you commit cyber crime, even from remote places, you can and will be identified and held accountable for your actions.”

Neighbours said on Tuesday they had seen police removing computer equipment from the Love family's home over the weekend.

Student Kayleigh Streeton, 18, said: "My brother came home and saw police cars park up outside and they were taking computers away. "We knew there was something going on, but it wasn't until we heard it on the news that we realised what he was accused of."

Another resident said: "We didn't have any suspicions and to think something like that might have happened under our noses is certainly a surprise."

Mr Love, who in the past has taken part in protests for Occupy, the global "anti-greed movement", did not answer the door at the home he shares with his parents. His father Alexander is a chaplain at HMP Highpoint North. His mother Sirkka-Liisa also works at the jail as a teacher.

Under the computer misuse act, individuals can be arrested for launching attacks from within the UK against computers anywhere in the world. The hacking is alleged to have taken place over the last 12 months.

US prosecutors said the operation by Mr Love and his co-conspirators involved the installation of malware in the hacked systems, placing hidden “shells” or “back doors” within the networks, allowing them to return later to steal confidential data.

Gary McKinnon

Mr Love’s case echoes that of Glasgow-born Gary McKinnon in 2002. In that case, the former hairdresser immobilised sensitive systems in the wake of 9/11 on a “moral crusade’ to disclose classified information about UFOs. His proposed extradition to the US was halted by the British government in 2012.

The US indictment includes three pieces of instant message conversations Mr Love allegedly had with his partners in an online chat forum.

In one, Mr Love is said to have written: “Ahaha, we owning lots of nasa sites.” In another exchange, he allegedly said: “This … stuff is really sensitive.”

He is charged with one count of accessing a US department or agency computer without authorisation and one count of conspiring to do the same.

If convicted, he faces a maximum penalty of five years in prison and a $250,000 fine, or twice the total gain or loss from the offence. He has been released on police bail until next February.