Feds charge professed White Hat hackers in breach of AT&T iPad customer data

According to Reuters, Daniel Spitler and Andrew Auernheimer, both of whom work at Goatse Security are being charged with fraud and conspiracy to access a computer without authorization.

Professed White Hat hackers face federal criminal charges for grabbing the e-mail addresses of 114,000 AT&T 3G customers who use iPads.

The breach they acknowledge committing and publicized last summer took advantage of weaknesses in AT&Ts resubscription page for iPads to harvest the e-mail addresses and ID numbers for the SIM cards in their iPads.

The breach yielded this information for some famous people, including TV journalist Diane Sawyer, former White House Chief of Staff Rahm Emanuel and New York Mayor Michael Bloomberg, as well as employees of NASA, the U.S. Department of Justice, DARPA, The New York Times, Google, Microsoft, Goldman Sachs and Citigroup.

According to Reuters, Daniel Spitler and Andrew Auernheimer, both of whom work at Goatse Security are being charged with fraud and conspiracy to access a computer without authorization.

The pair leaked information about the breach to Gawker Media, but AT&T said the weakness that allowed the breach was fixed before the story ran.

The flaw was that AT&T prepopulated the subscription-renewal page with users' e-mail addresses. The hackers managed to access these pagers for other users and wrote a script that automated scraping the e-mail addresses and SIM card IDs.

While claiming to hack for social good, Aunheimer has also been characterized as an Internet troll - someone who performs destructive or annoying acts via the Internet. In court documents last month, FBI agent Christian Schorle says the FBI has been aware of Aunheimer as a hacker and "self-proclaimed troll" since 2001.

When the FBI raided his home in Arkansas as part of the AT&T breach, they found drugs that resulted in charges of possession of cocaine, LSD, ecstasy and oxycodone.

In an open letter last November to Assistant U.S. Attorney Lee Vartan on the Goatse Security Web site, Auernheimer says the intent of the breach was to point out lax security on the part of AT&T. At the time of the letter, Auernheimer says he knew the U.S. Attorney was considering charges.

In the letter he claims that Goatse has a reputation for fighting cyber crime. "Social responsibility has always been at the core of everything we do at Goatse Security," he writes, "and this will be extraordinarily obvious at a trial. Goatse has done large amounts of documented work in project areas such as combating safe havens for pedophiles worldwide, protecting U.S. infrastructure, and keeping U.S. citizens safe from Russian and Chinese organized crime."

The letter urges Vartan to drop the prosecution because continuing might damage his professional reputation. "I pray for you, Lee," Auernheimer says in the letter. "I pray for you to see wisdom in your actions, and pray for you to be guided towards righteousness. I advise you to discuss this matter with your family, your friends, victims of crimes you have prosecuted and your teachers, for they are the people who would have been harmed had AT&T been allowed to silently bury their negligent endangerment of United States infrastructure."

Read more about wide area network in Network World's Wide Area Network section.

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection

Tags NASAwhite hat hackersThe New York Timesdata breachlegalcybercrimecitigroupReutersGoogleMicrosoftsecurityat&t

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Tim Greene

Network World
Show Comments

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

David Coyle

Brother PocketJet PJ-773 A4 Portable Thermal Printer

I rate the printer as a 5 out of 5 stars as it has been able to fit seamlessly into my busy and mobile lifestyle.

Kurt Hegetschweiler

Brother PocketJet PJ-773 A4 Portable Thermal Printer

It’s perfect for mobile workers. Just take it out — it’s small enough to sit anywhere — turn it on, load a sheet of paper, and start printing.

Matthew Stivala

HP OfficeJet 250 Mobile Printer

The HP OfficeJet 250 Mobile Printer is a great device that fits perfectly into my fast paced and mobile lifestyle. My first impression of the printer itself was how incredibly compact and sleek the device was.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?