Stephen Heymann

Last updated

Stephen Heymann
Assistant United States Attorney for the District of Massachusetts
Personal details
OccupationAttorney

Stephen P. Heymann is an attorney who formerly served as an Assistant U.S. Attorney for the District of Massachusetts. He is no longer with the U.S. Attorney's office.[ citation needed ] He headed U.S. Attorney Carmen Ortiz's Internet and Computer Crimes Unit. [1] [2] [3] [4]

Contents

Heymann is infamously known for his role in the United States v. Swartz federal criminal case which directly led to the suicide of activist Aaron Swartz. [5] Heymann was also the lead prosecutor in the investigation of TJX hack which directly led to the suicide of the ethical hacker Jonathan James, who repeatedly denied any role in the hack, including in his suicide note. [6] [7]

Personal

Heymann is the son of former United States Deputy Attorney General Philip Heymann, [2] [4] with whom Ortiz worked on judicial reform in Guatemala. [4]

According to the National Law Journal,[ when? ] "Heymann[ clarification needed ] has long been recognized as a national expert in electronic crimes, prosecuting cutting-edge cases." [2]

In wake of the United States v. Swartz case two petitions, collectively signed by over 90,000 people, called for Heymann to be fired. However The White House responded with; "We do not believe this is the appropriate forum in which to do so". [8]

Career

Heymann was a career federal prosecutor.[ when? ] [2] [9]

He was formerly[ when? ] a Special Attorney with the U.S. Department of Justice's Organized Crime Strike Force, Deputy Chief of the Criminal Division of the Massachusetts U.S. Attorney's Office. [1] [10] He headed[ when? ] that office's Internet and Computer Crimes Unit, one of the first offices of its kind in the U.S. [9] [ needs update ]

NASA computer hack

In 1995-1996, Heymann supported lead prosecutor Jacqueline E. Ross and worked with investigators [11] in the lead-up to the arrest, prosecution and conviction [12] [13] of Julio César "Griton" Ardita, an Argentine man accused of hacking into NASA and Department of Defense computers. [2] [14] The court-ordered wiretap that made it possible to identify and prosecute Ardita was the first of its kind. [11] [12] [13] [14]

From his apartment in Buenos Aires, Ardita accessed a computer network at Harvard. [14] He stole passwords as Harvard users accessed other networks. [14] By the time he was caught, Ardita had hacked into the U.S. Department of Defense, NASA's Jet Propulsion Laboratory, NASA Ames Research Center, the Naval Research Laboratory, and the Naval Command Control and Ocean Surveillance Center. [11] [14]

Heymann said investigators worked with Harvard so they could track an intruder without violating users' privacy. [11] He said the compromised Harvard network comprised 16,500 accounts and 13,000 users, sending out about 60,000 email messages daily. [11] Investigators, he explained used a high-speed computer to sift through messages, focusing on 10 to 15 keywords that matched the suspect's profile. [11] According to Heymann, investigators believed there were only two instances in which they had read a complete message that did not come from Ardita. [11]

In a press release after the warrant for Ardita's arrest was announced, Attorney General Janet Reno said, "This case demonstrates that the real threat to computer privacy comes from unscrupulous intruders, not government investigators", going on to praise the creation of procedures that focused on the intruder's unlawful activities. [12] "This is doing it the right way," she said. "We are using a traditional court order and new technology to defeat a criminal, while protecting individual rights and Constitutional principles that are important to all Americans." [12] At her weekly press conference, she elaborated: "This is an example of how the Fourth Amendment and a court order can be used to protect rights while adapting to modern technology." [11]

The case was complicated by the fact that Ardita resided in Argentina, where the charged felonies were not extraditable offenses. [11] Two years after the warrant issued, Ardita voluntarily traveled to the U.S., pleaded guilty, and was sentenced to three years probation and a fine of $5,000. [14]

TJX identity theft

Heymann led the investigation of computer hacker Albert Gonzalez-associates Jonathan James, Stephen Watt and Damon Toey for computer intrusion and identity theft from the TJX Companies [15] [16] [17] and from retailers like BJ's, DSW, OfficeMax, Boston Market, Barnes & Noble, Sports Authority and Forever 21. [17]

Watt and Toey were convicted. [18] James, an alleged "unindicted co-conspirator," [15] was never prosecuted in the case, having committed suicide [18] two weeks after the U.S. Secret Service raided his house. [15] Gonzalez was never charged in the TJX case. [15]

Heartland Payment Systems

Heymann was instrumental in successfully prosecuting Gonzalez for the theft of data from 130 million transactions at Heartland Payment Systems. [16] He was honored with the Attorney General's Distinguished Service Award [2] [19] by Attorney General Eric Holder for his work on "the largest and most successful identity theft and hacking investigation and prosecution ever conducted in the United States." [2] [20]

Aaron Swartz

Heymann's conduct in the prosecution of Internet activist Aaron Swartz is widely considered to be inconsistent with professional ethics. [21] [22] Two White House web site petitions to fire him for his handling of the case garnered more than 90,000 signatures (combined) in less than a month. [9] [23] One attorney for Swartz accused Heymann of using the case to gain publicity for himself. [24] Two others submitted a complaint to the Department of Justice Office of Professional Responsibility, accusing Heymann of prosecutorial misconduct and alleging the prosecution withheld exculpatory evidence and undermined Swartz's right to a fair trial. [22] [25]

Swartz killed himself before his trial. [21] According to attorney Andy Good, Swartz's initial attorney, "I told Heymann the kid was a suicide risk. His reaction was a standard reaction in that office, not unique to Steve. He said, 'Fine, we’ll lock him up.' I’m not saying they made Aaron kill himself. Aaron might have done this anyway. I’m saying they were aware of the risk, and they were heedless." [26] [27]

Ortiz has defended the prosecution: "We thought the case was reasonably handled and we would not have done things differently. We're going to continue doing the work of the office and of following our mission." [28] [29] Testifying before the House Oversight Committee, Attorney General Eric Holder called the case "a good use of prosecutorial discretion." [30]

Related Research Articles

<span class="mw-page-title-main">Computer Fraud and Abuse Act</span> 1986 United States cybersecurity law

The Computer Fraud and Abuse Act of 1986 (CFAA) is a United States cybersecurity bill that was enacted in 1986 as an amendment to existing computer fraud law, which had been included in the Comprehensive Crime Control Act of 1984. Prior to computer-specific criminal laws, computer crimes were prosecuted as mail and wire fraud, but the applying law was often insufficient.

<span class="mw-page-title-main">District attorney</span> US state prosecutor of criminal offenses

In the United States, a district attorney (DA), county attorney, county prosecutor, state's attorney, prosecuting attorney, commonwealth's attorney, state attorney or solicitor is the chief prosecutor or chief law enforcement officer representing a U.S. state in a local government area, typically a county or a group of counties. The exact scope of the office varies by state. Generally, the prosecutor represents the people of the jurisdiction in the state's courts. With the exception of three states, district attorneys are elected, unlike similar roles in other common law jurisdictions.

<span class="mw-page-title-main">Prosecutor</span> Legal profession

A prosecutor is a legal representative of the prosecution in states with either the adversarial system, which is adopted in common law, or inquisitorial system, which is adopted in civil law. The prosecution is the legal party responsible for presenting the case in a criminal trial against the defendant, an individual accused of breaking the law. Typically, the prosecutor represents the state or the government in the case brought against the accused person.

<span class="mw-page-title-main">Aaron Swartz</span> Computer programmer and internet/political activist (1986–2013)

Aaron Hillel Swartz, also known as AaronSw, was an American computer programmer, entrepreneur, writer, political organizer, and Internet hacktivist. As a programmer, Swartz helped develop the web feed format RSS; the technical architecture for Creative Commons, an organization dedicated to creating copyright licenses; the website framework web.py; and the lightweight markup language format Markdown. Swartz was involved in the development of the social news aggregation website Reddit until he departed from the company in 2007. He is often credited as a martyr and a prodigy, and his work focused on civic awareness and activism.

<span class="mw-page-title-main">Jennifer Granick</span> American attorney and educator

Jennifer Stisa Granick is an American attorney and educator. Senator Ron Wyden has called Granick an "NBA all-star of surveillance law." She is well known for her work with intellectual property law, free speech, privacy law, and other things relating to computer security, and has represented several high-profile hackers.

<span class="mw-page-title-main">United States Department of Justice Criminal Division</span> The federal governments main anti-crime arm

The United States Department of Justice Criminal Division is a federal agency of the United States Department of Justice that develops, enforces, and supervises the application of all federal criminal laws in the United States. Criminal Division attorneys prosecute many nationally significant cases and formulate and implement criminal enforcement policy. Division attorneys also provide advice and guidance to the Attorney General of the United States, the United States Congress, and the White House on matters of criminal law. The Division was founded in 1919.

<span class="mw-page-title-main">Quinn Norton</span> American journalist (born 1973)

Quinn Norton is an American journalist and essayist. Her work covers hacker culture, Anonymous, the Occupy movement, intellectual property and copyright issues, and the Internet.

<span class="mw-page-title-main">Paul K. Charlton</span> Former United States Attorney for Arizona

Paul K. Charlton is a former United States Attorney and current partner at the law firm of Dentons US LLP in the firm's Phoenix, Arizona office. Charlton concentrates his practice on high-profile and complex litigation, internal investigations and white-collar criminal defense. Charlton also represents a number of Arizona Native American governments, including Ak-Chin, Salt River Pima-Maricopa, Haulapai, the Navajo Nation, and Tohono O'odham.

Jonathan Joseph James was an American hacker who was the first juvenile incarcerated for cybercrime in the United States. The South Florida native was 15 years old at the time of the first offense and 16 years old on the date of his sentencing. He died at his Pinecrest, Florida home on May 18, 2008, of a self-inflicted gunshot wound.

The Public Integrity Section (PIN) is a section of the Criminal Division of the U.S. Department of Justice charged with combating political corruption at all levels of government through the prosecution of corrupt federal, state, and local elected and appointed public officials.

<span class="mw-page-title-main">Dismissed U.S. attorneys summary</span>

This article about dismissed U.S. attorneys summarizes the circumstances surrounding a number of U.S. attorneys dismissed from office in the United States Department of Justice in 2006. Eight were dismissed In December 2006, and others may have been forced out of office under similar circumstances in 2005 and 2006. The manner of the firings, the congressional response to them, and the explanations offered by Bush administration officials are aspects of a political controversy starting in the first quarter of 2007. As of May 2007 a clear explanation of why the attorneys were dismissed had not been put forward by the Bush administration or the Department of Justice leadership. There are in total 93 U.S. attorneys that serve 94 Federal district courts.

Harvey Allen Silverglate is an American attorney, journalist, writer, and a co-founder of the Foundation for Individual Rights and Expression (FIRE).

<span class="mw-page-title-main">California Department of Justice</span> Statewide investigative law enforcement agency

The California Department of Justice is a statewide investigative law enforcement agency and legal department of the California executive branch under the elected leadership of the Attorney General of California (AG) which carries out complex criminal and civil investigations, prosecutions, and other legal services throughout the US State of California. The department is equivalent to the state bureaus of investigation in other states.

A deferred prosecution agreement (DPA), which is very similar to a non-prosecution agreement (NPA), is a voluntary alternative to adjudication in which a prosecutor agrees to grant amnesty in exchange for the defendant agreeing to fulfill certain requirements. A case of corporate fraud, for instance, might be settled by means of a deferred-prosecution agreement in which the defendant agrees to pay fines, implement corporate reforms, and fully cooperate with the investigation. Fulfillment of the specified requirements will then result in dismissal of the charges.

<span class="mw-page-title-main">Albert Gonzalez</span> American computer hacker and criminal

Albert Gonzalez is an American computer hacker, computer criminal and police informer, who is accused of masterminding the combined credit card theft and subsequent reselling of more than 170 million card and ATM numbers from 2005 to 2007, the biggest such fraud in history. Gonzalez and his accomplices used SQL injection to deploy backdoors on several corporate systems in order to launch packet sniffing attacks which allowed him to steal computer data from internal corporate networks.

<span class="mw-page-title-main">Preet Bharara</span> American lawyer and former federal prosecutor (born 1968)

Preetinder Singh Bharara is an Indian-born American lawyer and former federal prosecutor who served as the United States Attorney for the Southern District of New York from 2009 to 2017. He is currently a partner at the law firm Wilmer Cutler Pickering Hale and Dorr. He served as an Assistant U.S. Attorney for five years prior to leading the Southern District of New York.

<i>United States v. Swartz</i> American court case

In United States of America v. Aaron Swartz, Aaron Swartz, an American computer programmer, writer, political organizer and Internet activist, was prosecuted for multiple violations of the Computer Fraud and Abuse Act of 1986 (CFAA), after downloading academic journal articles through the MIT computer network from a source (JSTOR) for which he had an account as a Harvard research fellow. Federal prosecutors eventually charged him with two counts of wire fraud and eleven violations of the Computer Fraud and Abuse Act, charges carrying a cumulative maximum penalty of $1 million in fines plus 35 years in prison, asset forfeiture, restitution and supervised release. Facing trial and the possibility of imprisonment, Swartz committed suicide, and the case was consequently dismissed.

<span class="mw-page-title-main">Carmen Ortiz</span> American attorney and college instructor

Carmen Milagros Ortiz is an attorney, college instructor, and former United States Attorney for the District of Massachusetts.

<span class="mw-page-title-main">Taren Stinebrickner-Kauffman</span> Australian-American activist (born 1981)

Taren Kate Stinebrickner-Kauffman is an Australian-American activist. She is the founder of SumOfUs, and served as the executive director until 2016. In March 2012, she and her group were active critics of working conditions at Apple Inc. supplier Foxconn. From 2020 until 2022, Taren served as president of New Media Ventures, a non-profit venture capital firm focused on progressive organisations.

<span class="mw-page-title-main">Michael R. Sherwin</span> American lawyer (born 1971)

Michael Rafi Sherwin is an attorney who served as the acting United States Attorney for the District of Columbia from 2020 to 2021. He was appointed by Attorney General William Barr during the Trump administration. He is partner at the law firm Kobre & Kim where he handles international government investigations.

References

  1. 1 2 "Serial arsonist sentenced to 15 years". U.S. Attorney’s Office – District of Massachusetts. U.S. Dept of Justice. December 17, 2012. Archived from the original on January 14, 2013. Retrieved February 22, 2013. The [arson] case was prosecuted by … Ortiz's Major Crimes Unit and Assistant U.S. Attorney Stephen P. Heymann of Ortiz's Internet and Computer Crimes Unit.
  2. 1 2 3 4 5 6 7 Scarcella, Mike (January 16, 2013). "Hacking defendant's suicide spurs debate over prosecutors" . The National Law Journal . Retrieved January 27, 2013. Partially archived (1 of 3 pages) from the original on February 16, 2013.
  3. US Department of Justice. "US Attorney's Office - District of Massachusetts - 1Divisions" . Retrieved January 15, 2013.
  4. 1 2 3 Day, Michael (January 15, 2013). "Aaron Swartz's Unbending Prosecutors Insisted on Prison Time". Daily Beast. Retrieved January 29, 2013.
  5. "Carmen Ortiz and Stephen Heymann: accountability for prosecutorial abuse | Glenn Greenwald". the Guardian. January 16, 2013. Retrieved July 20, 2022.
  6. Sharrock, Justine (January 15, 2013). "Internet Activist's Prosecutor Linked To Another Hacker's Death". BuzzFeed News. Retrieved March 14, 2024.
  7. "Prosecutor in Aaron Swartz 'hacking' case comes under fire". CNET. Retrieved March 14, 2024.
  8. https://www.computerworld.com/article/2866549/white-house-declines-to-act-on-petitions-to-fire-aaron-swartz-prosecutors.html [ bare URL ]
  9. 1 2 3 Greenberg, Andy White House Owes Response To Petition To Fire Prosecutor Of Aaron Swartz And Other Hackers, Forbes, February 11, 2013. Retrieved March 23, 2013.
  10. Berkman Center for Internet & Society at Harvard University (June 26, 2003). "Panelist Biographies: October 10 Workshop for the First Circuit Judicial Conference" . Retrieved January 15, 2013.
  11. 1 2 3 4 5 6 7 8 9 First Internet Wiretap Leads to a Suspect, New York Times, March 31, 1996. Retrieved March 23, 2013.
  12. 1 2 3 4 https://www.justice.gov/opa/pr/1996/March96/146.txt [ bare URL plain text file ]
  13. 1 2 "Argentine Computer Hacker Agrees to Waive Extradition and Returns to Plead Guilty to Felony Charges in Boston".
  14. 1 2 3 4 5 6 Stutz, Michael (December 5, 1997). "Argentine Hacker Pleads Guilty". Wired. Archived from the original on October 27, 2012. Retrieved December 25, 2016.{{cite magazine}}: CS1 maint: bot: original URL status unknown (link)
  15. 1 2 3 4 Zetter, Kim (June 18, 2009). "TJX Hacker Was Awash in Cash; His Penniless Coder Faces Prison". Wired . Retrieved January 27, 2013.
  16. 1 2 Verini, James (November 10, 2010). "The Great Cyberheist". The New York Times . Retrieved January 14, 2013.
  17. 1 2 Vijayan, Jaikumar, Man accused in TJX data breach pleads guilty, Computerworld, September 12, 2008, Retrieved March 23, 2013.
  18. 1 2 Rogers, Abby, Ex-Con Shares How Hard It Is To Be Targeted By One Of Aaron Swartz's Prosecutors, Business Insider, January 19, 2013. Retrieved January 25, 2013.
  19. Carter, Zach, Ryan Grim and Ryan J. Reilly, Carmen Ortiz, U.S. Attorney, Under Fire Over Suicide Of Internet Pioneer Aaron Swartz, The Huffington Post, January 14, 2013. Retrieved January 27, 2013.
  20. Attorney General Holder Recognizes DOJ Employees and Others for Their Service at Annual Awards Ceremony, 27 October 2010, DOJ Press Release. Retrieved January 27, 2013.
  21. 1 2 Ricadela, Aaron; Dan Hart (January 13, 2013). "Web Activist's Family Blames MIT, Prosecutors in Death". Bloomberg Businessweek . Archived from the original on January 16, 2013. Retrieved January 14, 2013.
  22. 1 2 Grim, Ryan; Ryan J. Reilly (March 13, 2013). "Aaron Swartz Lawyers Accuse Prosecutor Stephen Heymann Of Misconduct". The Huffington Post . Retrieved March 15, 2013.
  23. "Fire Assistant U.S. Attorney Steve Heymann". White House Petitions. The White House. January 12, 2013. Archived from the original on February 18, 2013. Retrieved February 9, 2013.
  24. Reilly, Ryan J.; Gerry Smith; Zach Carter (January 14, 2013). "Aaron Swartz's Lawyer: Prosecutor Stephen Heymann Wanted 'Juicy' Case For Publicity". The Huffington Post . Retrieved January 14, 2013.
  25. A copy of the January 28, 2013 letter to the DOJ Office of Professional Responsibility In Re: U.S. v. Swartz. posted by The Huffington Post. Retrieved March 17, 2013.
  26. "On humanity, a big failure in Aaron Swartz case - the Boston Globe". The Boston Globe .
  27. Silverglate, Harvey (January 23, 2013). "The Swartz suicide and the sick culture of the DOJ". Mass Lawyers' Weekly. Archived from the original on January 29, 2013. Retrieved March 23, 2013.
  28. Thomson, Iain, Swartz suicide won't change computer crime policy, says prosecutor, The Register, January 22, 2013. Retrieved January 29, 2013
  29. Cassidy, Chris and Christine McConville, Ortiz says suicide will not change handling of cases, The Boston Herald, January 21, 2013. Retrieved January 29, 2013.
  30. Masnick, Mike (March 7, 2013). "Holder: DOJ Used Discretion In Bullying Swartz, Press Lacked Discretion In Quoting Facts". TechDirt. Retrieved December 25, 2016.