Stephen Heymann

From Infogalactic: the planetary knowledge core
Jump to: navigation, search
Stephen Heymann
Seal of the United States Department of Justice.svg
Assistant United States Attorney for the District of Massachusetts
Personal details
Occupation Attorney

Stephen P. Heymann is an Assistant U.S. Attorney for the District of Massachusetts. He heads U.S. Attorney Carmen Ortiz’s Internet and Computer Crimes Unit.[1][2][3][4] Heymann is one of about one hundred Assistant U.S. Attorneys working in that office.[3]

Prosecutor

Heymann is a career federal prosecutor.[2][5] He is the son of former United States Deputy Attorney General Philip Heymann,[2][4] with whom Ortiz worked on judicial reform in Guatemala.[4] According to the National Law Journal, "Heymann has long been recognized as a national expert in electronic crimes, prosecuting cutting-edge cases."[2]

He has been a Special Attorney with the U.S. Department of Justice's Organized Crime Strike Force, Deputy Chief of the Criminal Division of the Massachusetts U.S. Attorney's Office.[1][6] He heads that office's Internet and Computer Crimes Unit, one of the first offices of its kind in the U.S.[5]

NASA computer hack

In 1996, Heymann worked with investigators[7] and was a lead prosecutor[8][9] in the arrest and conviction of Julio César "Griton" Ardita, an Argentine man accused of hacking into NASA and Department of Defense computers.[2][10] The court-ordered wiretap that made it possible to identify and prosecute Ardita was the first of its kind.[7][8][9][10]

From his apartment in Buenos Aires, Ardita accessed a computer network at Harvard.[10] He stole passwords as Harvard users accessed other networks.[10] By the time he was caught, Ardita had hacked into the U.S. Department of Defense, NASA's Jet Propulsion Laboratory, NASA Ames Research Center, the Naval Research Laboratory, and the Naval Command Control and Ocean Surveillance Center.[7][10]

Heymann said investigators worked with Harvard so they could track an intruder without violating users' privacy.[7] He said the compromised Harvard network comprised 16,500 accounts and 13,000 users, sending out about 60,000 email messages daily.[7] Investigators, he explained used a high-speed computer to sift through messages, focusing on 10 to 15 keywords that matched the suspect's profile.[7] According to Heymann, investigators believed there were only two instances in which they had read a complete message that did not come from Ardita.[7]

In a press release after the warrant for Ardita's arrest was announced, Attorney General Janet Reno said, "This case demonstrates that the real threat to computer privacy comes from unscrupulous intruders, not government investigators", going on to praise the creation of procedures that focused on the intruder's unlawful activities.[8] "This is doing it the right way," she said. "We are using a traditional court order and new technology to defeat a criminal, while protecting individual rights and Constitutional principles that are important to all Americans."[8] At her weekly press conference, she elaborated: "This is an example of how the Fourth Amendment and a court order can be used to protect rights while adapting to modern technology."[7]

The case was complicated by the fact that Ardita resided in Argentina, where the charged felonies were not extraditable offenses.[7] Two years after the warrant issued, Ardita voluntarily traveled to the U.S., pleaded guilty, and was sentenced to three years probation and a fine of $5,000.[10]

TJX identity theft

Heymann led the investigation of computer hacker Albert Gonzalez-associates Jonathan James, Stephen Watt and Damon Toey for computer intrusion and identity theft from the TJX Companies[11][12][13][14] and from retailers like BJ's, DSW, OfficeMax, Boston Market, Barnes & Noble, Sports Authority and Forever 21.[14]

Watt and Toey were convicted.[15] James, an alleged "unindicted co-conspirator,"[11] was never prosecuted in the case, having committed suicide[13][15] two weeks after the U.S. Secret Service raided his house.[11][13] Gonzalez was never charged in the TJX case.[11]

Heartland Payment Systems

Heymann was instrumental in successfully prosecuting Gonzalez for the theft of data from 130 million transactions at Heartland Payment Systems.[12] He was honored with the Attorney General's Distinguished Service Award[2][13][16] by Attorney General Eric Holder for his work on "the largest and most successful identity theft and hacking investigation and prosecution ever conducted in the United States."[2][17]

Aaron Swartz

<templatestyles src="Module:Hatnote/styles.css"></templatestyles>

Heymann's conduct in the prosecution of Internet activist Aaron Swartz is widely considered to be inconsistent with professional ethics.[18][19] A White House web site petition to fire him for his handling of the case garnered more than 25,000 signatures in less than a month.[5][20] One attorney for Swartz accused Heymann of using the case to gain publicity for himself.[21] Two others submitted a complaint to the Department of Justice Office of Professional Responsibility, accusing Heymann of prosecutorial misconduct and alleging the prosecution withheld exculpatory evidence and undermined Swartz's right to a fair trial.[19][22]

Swartz committed suicide before his trial.[18] According to attorney Andy Good, Swartz's initial attorney, "I told Heymann the kid was a suicide risk. His reaction was a standard reaction in that office, not unique to Steve. He said, 'Fine, we’ll lock him up.' I’m not saying they made Aaron kill himself. Aaron might have done this anyway. I’m saying they were aware of the risk, and they were heedless."[23][24]

Ortiz has defended the prosecution: "We thought the case was reasonably handled and we would not have done things differently. We're going to continue doing the work of the office and of following our mission."[25][26] Testifying before the House Oversight Committee Attorney General Eric Holder called the case "a good use of prosecutorial discretion."[27]

References

  1. 1.0 1.1 Lua error in package.lua at line 80: module 'strict' not found.
  2. 2.0 2.1 2.2 2.3 2.4 2.5 2.6 Scarcella, Mike, Hacking defendant's suicide spurs debate over prosecutors, National Law Journal, January 16, 2013. Retrieved January 27, 2013.
  3. 3.0 3.1 Lua error in package.lua at line 80: module 'strict' not found.
  4. 4.0 4.1 4.2 Lua error in package.lua at line 80: module 'strict' not found.
  5. 5.0 5.1 5.2 Greenberg, Andy White House Owes Response To Petition To Fire Prosecutor Of Aaron Swartz And Other Hackers, Forbes, February 11, 2013. Retrieved March 23 2013.
  6. Lua error in package.lua at line 80: module 'strict' not found.
  7. 7.0 7.1 7.2 7.3 7.4 7.5 7.6 7.7 7.8 First Internet Wiretap Leads to a Suspect, New York Times, March 31, 1996. Retrieved March 23, 2013.
  8. 8.0 8.1 8.2 8.3 http://www.justice.gov/opa/pr/1996/March96/146.txt
  9. 9.0 9.1 https://fas.org/irp/news/1998/05/arditasnt.htm
  10. 10.0 10.1 10.2 10.3 10.4 10.5 Lua error in package.lua at line 80: module 'strict' not found.
  11. 11.0 11.1 11.2 11.3 Lua error in package.lua at line 80: module 'strict' not found.
  12. 12.0 12.1 Lua error in package.lua at line 80: module 'strict' not found.
  13. 13.0 13.1 13.2 13.3 Prosecutor pursuing Aaron Swartz linked to suicide of another hacker, RT, January 15, 2013. Retrieved January 27, 2013.
  14. 14.0 14.1 Vijayan, Jaikumar, Man accused in TJX data breach pleads guilty, Computerworld, September 12, 2008, Retrieved March 23, 2013.
  15. 15.0 15.1 Rogers, Abby, Ex-Con Shares How Hard It Is To Be Targeted By One Of Aaron Swartz's Prosecutors, Business Insider, January 19, 2013. Retrieved January 25, 2013.
  16. Carter, Zach, Ryan Grim and Ryan J. Reilly, Carmen Ortiz, U.S. Attorney, Under Fire Over Suicide Of Internet Pioneer Aaron Swartz, The Huffington Post, January 14, 2013. Retrieved January 27, 2013.
  17. Attorney General Holder Recognizes DOJ Employees and Others for Their Service at Annual Awards Ceremony, 27 October 2010, DOJ Press Release. Retrieved January 27, 2013.
  18. 18.0 18.1 Lua error in package.lua at line 80: module 'strict' not found.
  19. 19.0 19.1 Lua error in package.lua at line 80: module 'strict' not found.
  20. Lua error in package.lua at line 80: module 'strict' not found.
  21. Lua error in package.lua at line 80: module 'strict' not found.
  22. A copy of the January 28, 2013 letter to the DOJ Office of Professional Responsibility In Re: U.S. v. Swartz. posted by The Huffington Post. Retrieved March 17, 2013.
  23. http://bostonglobe.com/metro/2013/01/15/humanity-deficit/bj8oThPDwzgxBSHQt3tyKI/story.html
  24. Lua error in package.lua at line 80: module 'strict' not found.
  25. Thomson, Iain, Swartz suicide won't change computer crime policy, says prosecutor, The Register, January 22, 2013. Retrieved January 29, 2013
  26. Cassidy, Chris and Christine McConville, Ortiz says suicide will not change handling of cases, The Boston Herald, January 21, 2013. Retrieved January 29, 2013.
  27. http://www.techdirt.com/articles/20130306/13444122220/holder-doj-used-discretion-bullying-swartz-press-lacked-discretion-quoting-facts.shtml