Hewlett-Packard spying scandal

Last updated

The media descended upon HP headquarters on September 22, 2006. News vans at Hewlett Packard.jpg
The media descended upon HP headquarters on September 22, 2006.

On September 5, 2006, Newsweek revealed [1] that the general counsel of Hewlett-Packard, at the behest of HP chairwoman Patricia Dunn, had contracted a team of independent security experts to investigate board members and several journalists in order to identify the source of an information leak. [2] In turn, those security experts recruited private investigators who used a spying technique known as pretexting. The pretexting involved investigators impersonating HP board members and nine journalists (including reporters for CNET, the New York Times and the Wall Street Journal ) in order to obtain their phone records. The information leaked related to HP's long-term strategy and was published as part of a CNET article [3] in January 2006. HP hired public relations firm Sitrick and Company to manage their media relations during the crisis. [4]

Contents

Patricia Dunn claimed she did not know beforehand the methods the investigators used to try to determine the source of the leak. [5] Board member George Keyworth was ultimately accused of being the source and on September 12, 2006, he resigned, although he continued to deny making unauthorized disclosures of confidential information to journalists and was thanked by Mark Hurd for his board service. [6] It was also announced at that time that Dunn would continue as chairwoman until January 18, 2007, at which point HP CEO Mark Hurd would succeed her. [7] Then, on September 22, 2006 HP announced that Dunn had resigned as chairwoman because of the "distraction her presence on our board" created. [8] On September 28, 2006, Ann Baskins, HP's general counsel, resigned [9] hours before she was to appear as a witness before the House Committee on Energy and Commerce, where she would ultimately invoke the Fifth Amendment to refuse to answer questions. [10]

Investigation by the House Committee on Energy and Commerce

On September 11, 2006, CNET News.com publicly released a five-page letter written by the United States House Committee on Energy and Commerce to Patricia Dunn stating that it had, for the past seven months, been conducting an investigation on Internet-based data brokers who allegedly use "lies, fraud and deception" to acquire personal information, and allow anyone who pay a "modest fee" to acquire "itemized incoming and outgoing call logs", not only for cell phone numbers but also for VoIP numbers, landline numbers, and unpublished phone numbers. Additional data that could be obtained included addresses and other personal data, obtained without the consent or prior notice to the owner of the number. The committee had learned about HP's use of pretexting through its September 6 SEC filing and through their own inquiry of HP's Nominating and Governance Committee, stating they are "troubled" by the information, "particularly that it involves HP—one of America's corporate icons."

The committee requested, under Rules X and XI of the United States House of Representatives, the following information from HP by September 18, 2006: [11]

1. The name and identity of the outside consulting firm cited in HP's September 6, 2006, filing with the SEC (the outside consulting firm), and of any other outside consultants who were hired by HP to assist in conducting the Leak Investigation.
2. Copies of any contracts, letters of engagement and investigative plans related to the Leak Investigation that was conducted by the outside consulting firm or by any other party.
3. The names and identities of all third parties, whether hired directly by HP or by HP's outside consulting firm, who were used during the leak investigation to procure, or to attempt to procure telephone records and other personal consumer information of any targets or subjects of the Leak Investigation.
4. A list of all individuals or entities that were targets or subjects, or designated as targets or subjects, of the Leak Investigation.
5. A list of all individuals, including HP employees, who were involved with conducting the Leak Investigation or who had contemporaneous knowledge of the Leak Investigation.
6. A list of all individuals or entities whose telephone records or other personal consumer information were procured or attempted to be procured by the outside consulting firm or by any party during the period January 1, 2005, to the present.
7. A list of all individuals whose telephone records or other personal consumer information were procured by the outside consulting firm or by any party during the period January 1, 2005, to the present. For each individual, describe the types of records that were procured.
8. Copies of all reports prepared for the Leak Investigation by the outside consulting firm or by any other party, including any and all analysis or opinions regarding the appropriateness or legality of pretexting.
9. A copy of the letter of engagement with the law firm Wilson Sonsini Goodrich & Rosati regarding the Committee Inquiry.
10. Copies of all reports prepared for the Committee Inquiry, including any report prepared by the firm Wilson Sonsini Goodrich & Rosati.
11. Copies of all draft and final Board minutes that either relate to either the Leak Investigation or the Committee Inquiry.

In addition to the above-mentioned information, the Committee on Energy and Commerce also requested the following information from HP by September 25, 2006:

12. All records relating either the Leak Investigation or Committee Inquiry, including but not limited to communications to or from the outside consulting firm, communications by or between HP employees or Board Members, and communications to or from the outside counsel. Please do not provide any copies of the actual telephone records or any other records procured.

At the September 28, 2006 hearing, Dunn and Hurd both testified extensively about the investigation. [12] [13] Dunn testified that until June or July 2006, she did not realize that "pretexting" could involve identity misrepresentation. Dunn repeatedly insisted that she had believed that personal phone records could be obtained through legal methods.

Other witnesses, including Ann Baskins, HP's former General Counsel, Kevin Hunsaker, a six-year HP employee who was a former HP Senior Counsel and "Director of Ethics and Standards of Business Conduct," Anthony Gentilucci, former HP/Compaq/DEC chief of global investigations, and several private investigators invoked the Fifth Amendment, refusing to answer questions due to the ongoing criminal investigations. [10]

Baskins' attorney's letter to the committee contains several documents describing the investigatory methods, who was pretexted, and whether there were any illegal acts committed, including memoranda prepared by HP's outside law firm Wilson, Sonsini, Goodrich & Rosati (Larry Sonsini was among the witnesses at the hearing). [14]

Hunsaker's May 24 confidential "attorney-client privileged" final report, which gives full details of the investigation, is also available. [15]

California criminal case

On October 4, 2006, California Attorney General Bill Lockyer filed criminal charges and arrest warrants against Dunn, HP's former chief ethics officer Kevin Hunsaker, and three outside investigators. [16] The complaint alleged the following four felony violations of the California Penal Code:

  1. Conspiracy to commit crime in violation of Sections 182(a)(1)
  2. Fraudulent use of wire, radio, or television transmissions in violation of Section 538.5
  3. Taking, copying, and using computer data in violation of Section 502(c)(2)
  4. Using personal identifying information without authorization in violation of Section 530.5(a)

The criminal complaint is publicly available. [17]

On March 14, 2007, the judge in Patricia Dunn's criminal case dismissed all charges. Hunsaker and the two investigators pleaded no contest to the wire fraud count; those charges were dismissed pending their completion of 96 hours of community service. [18] The court also dismissed its case against the third investigator, Bryan Wagner, who had pleaded guilty in federal jurisdiction.

Federal criminal charges

On January 11, 2007, Bryan Wagner (a private investigator who was engaged by Hewlett-Packard who had already been charged in the California case) was charged by the federal government with conspiracy and identity theft for allegedly obtaining the Social Security Number of an unidentified journalist to obtain the journalist's phone records. [19]

Wagner pleaded guilty to the charges. [20] On August 12, 2009, his sentencing hearing was postponed. [21]

On December 13, 2012, Wagner was sentenced to serve three months in prison, along with two years of supervisory release. [22]

Before this controversy, pretexting was a legal grey area. California had laws that applied to pretexting, but there were no federal laws specific to pretexting. [23]

Partially as a result of the case, however, Congress passed the Telephone Records and Privacy Protection Act of 2006, which specifically prohibits pretexting. [24] [25] Since then, at least two other people have been prosecuted under the new law: [25]

Related Research Articles

<span class="mw-page-title-main">Theodore Olson</span> American lawyer

Theodore Bevry Olson is an American lawyer who served as the 42nd solicitor general of the United States from 2001 until 2004. Previously, Olson served as the United States Assistant Attorney General of the Office of Legal Counsel (1981–1984) under President Ronald Reagan. He remains a practicing attorney at the law firm of Gibson, Dunn & Crutcher.

<span class="mw-page-title-main">PwC</span> Multinational professional services brand

PricewaterhouseCoopers International Limited is a multinational professional services brand of firms, operating as partnerships under the PwC brand. It is the second-largest professional services network in the world and is considered one of the Big Four accounting firms, along with Deloitte, EY, and KPMG.

Management consulting is the practice of providing consulting services to organizations to improve their performance or in any way to assist in achieving organizational objectives. Organizations may draw upon the services of management consultants for a number of reasons, including gaining external advice and accessing consultants' specialized expertise regarding concerns that call for additional oversight.

<span class="mw-page-title-main">Thomas Perkins (businessman)</span> American businessperson

Thomas James Perkins was an American businessman and venture capitalist who was one of the founders of the venture capital firm Kleiner Perkins.

<span class="mw-page-title-main">Viet D. Dinh</span> American lawyer

Viet D. Dinh is a Vietnamese-born American legal scholar who is on the board of Strategic Education. He is also the Chief Legal and Policy Officer of Fox Corporation where he leads all legal, government and regulatory and government affairs. He served as an Assistant Attorney General of the United States from 2001 to 2003, under the presidency of George W. Bush. Previously, Dinh was a partner at two leading law firms, Kirkland & Ellis LLP and Bancroft PLLC, the latter of which he founded. Born in Saigon, in former South Vietnam, he was a major contributor to the Patriot Act and is a former member of the Board of Directors of News Corporation.

<span class="mw-page-title-main">Social engineering (security)</span> Psychological manipulation of people into performing actions or divulging confidential information

In the context of information security, social engineering is the psychological manipulation of people into performing actions or divulging confidential information. A type of confidence trick for the purpose of information gathering, fraud, or system access, it differs from a traditional "con" in the sense that it is often one of the many steps in a more complex fraud scheme. It has also been defined as "any act that influences a person to take an action that may or may not be in their best interests."

Booz Allen Hamilton Holding Corporation is the parent of Booz Allen Hamilton Inc., an American government and military contractor, specializing in intelligence. It is headquartered in McLean, Virginia, in Greater Washington, D.C., with 80 other offices around the globe. The company's stated core business is to provide consulting, analysis and engineering services to public and private sector organizations and nonprofits.

<span class="mw-page-title-main">Mark Hurd</span> American businessman (1957–2019)

Mark Vincent Hurd was an American technology executive who served as Co-CEO and as a member of the board of directors of Oracle Corporation. He had previously served as chairman, chief executive officer, and president of Hewlett-Packard, before his forced resignation in 2010. He was also on the board of directors of Globality and was a member of the Technology CEO Council and board of directors of News Corporation until 2010.

The Plame affair was a political scandal that revolved around journalist Robert Novak's public identification of Valerie Plame as a covert Central Intelligence Agency officer in 2003.

The CIA leak grand jury investigation was a federal inquiry "into the alleged unauthorized disclosure of a Central Intelligence Agency (CIA) employee's identity", a possible violation of criminal statutes, including the Intelligence Identities Protection Act of 1982, and Title 18, United States Code, Section 793.

<span class="mw-page-title-main">James A. Baker (government attorney)</span> American lawyer

James Andrew Baker is a former American government official at the Department of Justice who served as general counsel for the Federal Bureau of Investigation (FBI) and later served as deputy general counsel at Twitter, Inc. before being fired by Elon Musk in December 2022.

Commercial intelligence is a form of open-source intelligence practiced by diverse international and local businesses.

Patricia C. Dunn was the non-executive chairman of the board of Hewlett-Packard (HP) from February 2005 until September 22, 2006, when she resigned her position.

<span class="mw-page-title-main">George A. Keyworth II</span>

George Albert "Jay" Keyworth II was an American physicist who served as White House Science Advisor from 1981 to January 1986. He was a board member of Hewlett-Packard who was asked to step down in light of the controversy surrounding disclosure of sensitive information to the media. He resigned on September 13, 2006.

Ann O'Neil Baskins is former General Counsel for Hewlett-Packard Company (HP). Baskins was linked to the HP pretexting scandal. On September 28, 2006, following public disclosure of the matter, Baskins resigned effective immediately, hours before she was to appear as a witness before the House Committee on Energy and Commerce at which she would later invoke the Fifth Amendment to "not be held to answer for a capital, or otherwise infamous crime." Baskins was never charged by California or federal authorities.

Larry Sonsini is an American lawyer specializing all aspects of corporate law. He is senior partner and founder of Wilson Sonsini Goodrich & Rosati, an international law firm in business and intellectual property law. In 2021, Sonsini was chosen to serve as chair of the board of trustees at Santa Clara University.

<span class="mw-page-title-main">Hewlett-Packard</span> American information technology company (1939–2015)

The Hewlett-Packard Company, commonly shortened to Hewlett-Packard or HP, was an American multinational information technology company headquartered in Palo Alto, California. HP developed and provided a wide variety of hardware components, as well as software and related services to consumers, small and medium-sized businesses (SMBs), and large enterprises, including customers in the government, health, and education sectors. The company was founded in a one-car garage in Palo Alto by Bill Hewlett and David Packard in 1939, and initially produced a line of electronic test and measurement equipment. The HP Garage at 367 Addison Avenue is now designated an official California Historical Landmark, and is marked with a plaque calling it the "Birthplace of 'Silicon Valley'".

<span class="mw-page-title-main">Mass surveillance in the United States</span>

The practice of mass surveillance in the United States dates back to wartime monitoring and censorship of international communications from, to, or which passed through the United States. After the First and Second World Wars, mass surveillance continued throughout the Cold War period, via programs such as the Black Chamber and Project SHAMROCK. The formation and growth of federal law-enforcement and intelligence agencies such as the FBI, CIA, and NSA institutionalized surveillance used to also silence political dissent, as evidenced by COINTELPRO projects which targeted various organizations and individuals. During the Civil Rights Movement era, many individuals put under surveillance orders were first labelled as integrationists, then deemed subversive, and sometimes suspected to be supportive of the communist model of the United States' rival at the time, the Soviet Union. Other targeted individuals and groups included Native American activists, African American and Chicano liberation movement activists, and anti-war protesters.

<span class="mw-page-title-main">Mueller special counsel investigation</span> US investigation into Russian interference in US elections

The Robert Mueller special counsel investigation was an investigation into 45th U.S. president Donald Trump regarding Russian interference in the 2016 United States elections and was conducted by special prosecutor Robert Mueller from May 2017 to March 2019. It was also called the Russia investigation, Mueller probe, and Mueller investigation. The investigation focused on three points:

  1. Russian interference in the 2016 United States elections
  2. Trump associates and their connection to Russian officials and espionage
  3. Possible obstruction of justice by Trump and his associates
<span class="mw-page-title-main">2017–2018 Department of Justice metadata seizures</span> Seizure of two American congressmens personal data

The United States Department of Justice under the Trump administration acquired by a February 2018 subpoena the Apple iCloud metadata of two Democrats on the House Intelligence Committee, several others associated with the committee, and some of their family members. The subpoena covered 73 phone numbers and 36 email addresses since the inception of the accounts. Seizing communications information of members of Congress is extraordinarily rare. The department also subpoenaed and obtained 2017 and 2018 phone log and email metadata from news reporters for CNN, The Washington Post and The New York Times. Apple also received and complied with February 2018 subpoenas for the iCloud accounts of White House counsel Don McGahn and his wife. Microsoft received a subpoena relating to a personal email account of a congressional staff member in 2017.

References

  1. ↑ PM, David A. Kaplan On 9/17/06 at 8:00 (September 17, 2006). "Suspicions and Spies in Silicon Valley". Newsweek . Archived from the original on February 2, 2019. Retrieved February 1, 2019.{{cite web}}: CS1 maint: numeric names: authors list (link)
  2. ↑ The comprehensive story of HP spying scandal along with critical discussion on involving corporate governance and ethical issues is available at Davani, Faraz (August 14, 2011). "HP Pretexting Scandal by Faraz Davani". Scribd. Archived from the original on November 18, 2011. Retrieved August 15, 2011.
  3. ↑ Kawamoto, Dawn. "HP outlines long-term strategy". CNET. Archived from the original on February 2, 2019. Retrieved February 1, 2019.
  4. ↑ Altus, Celest (September 12, 2006), "HP Taps Sitrick & Company as crisis grows", PRWeek, archived from the original on March 29, 2012, retrieved September 10, 2011
  5. ↑ Kopytoff, Verne; Guynn, Jessica (September 8, 2006). "HP chairwoman defends probe of board's leaks". The San Francisco Chronicle. Archived from the original on May 24, 2011.
  6. ↑ "HP Press Release: George Keyworth Resigns as HP Director". hp.com. September 12, 2006. Archived from the original on December 21, 2006. Retrieved February 1, 2019.{{cite web}}: CS1 maint: unfit URL (link)
  7. ↑ Kessler, Michelle; Hopkins, Jim (September 13, 2006). "New HP chief makes the best of a bad situation". USA Today. Archived from the original on June 29, 2011. Retrieved September 25, 2006.
  8. ↑ "HP Press Release: Patricia Dunn Resigns from HP Board". hp.com. September 22, 2006. Archived from the original on October 29, 2006. Retrieved February 1, 2019.{{cite web}}: CS1 maint: unfit URL (link)
  9. ↑ "HP General Counsel Resigns". HP Investor Relations – Financial news. November 5, 2006. Archived from the original on November 5, 2006. Retrieved February 1, 2019.{{cite web}}: CS1 maint: unfit URL (link)
  10. 1 2 Wong, Grace (September 28, 2006). "HP: Grueling day for Hurd & Dunn". CNN. Archived from the original on June 22, 2021. Retrieved September 28, 2006.
  11. ↑ "Letter from the Committee on Energy and Commerce to Patricia Dunn, Chairman of Hewlett-Packard" (PDF). September 11, 2006. Archived from the original on November 7, 2006.{{cite web}}: CS1 maint: unfit URL (link)[ dead link ]
  12. ↑ "Dunn's prepared testimony" (PDF). Mercury News . Archived (PDF) from the original on September 29, 2007. Retrieved October 6, 2006.
  13. ↑ "Hurd's prepared testimony" (PDF). United States House of Representatives. Archived from the original (PDF) on October 4, 2006. Retrieved October 6, 2006.
  14. ↑ "Letter: Baskins declines to testify" (PDF). San Jose Mercury News . September 28, 2006. Archived (PDF) from the original on October 12, 2006. Retrieved September 29, 2006.
  15. ↑ "Unauthorized Disclosure Investigation". The Smoking Gun . September 29, 2006. Archived from the original on October 5, 2006. Retrieved October 3, 2006.
  16. ↑ Wong, Grace (October 4, 2006). "Now, HP is a criminal case". CNN. Archived from the original on March 9, 2021. Retrieved October 4, 2006.
  17. ↑ "Superior Court of California Complaint for Arrest Warrant(s)" (PDF). California Office of the Attorney General. October 4, 2006. Archived from the original (PDF) on February 1, 2016. Retrieved April 6, 2016.
  18. ↑ Katz, Leslie. "Calif. court drops charges against Dunn". CNET. Archived from the original on February 2, 2019. Retrieved February 1, 2019.
  19. ↑ "Feds charge investigator in H-P boardroom case". MarketWatch by Dow Jones. January 11, 2007. Archived from the original on December 3, 2007. Retrieved January 16, 2007.
  20. ↑ Mullins, Grant Gross and Robert (January 11, 2007). "Update: HP investigator pleads guilty to ID theft, conspiracy". Computerworld. Archived from the original on September 28, 2018. Retrieved February 1, 2019.
  21. ↑ "Sentencing looms in HP phone-record scandal". Christian Science Monitor. Archived from the original on January 19, 2011. Retrieved April 11, 2011.
  22. ↑ Reisinger, Don. "HP 'pretexting' scandal ends with former P.I.'s sentencing". CNET. Archived from the original on February 2, 2019. Retrieved February 1, 2019.
  23. ↑ "Fuzzy Laws Come Into Play in the H.P. Pretexting Case". New York Times . September 19, 2006. Archived from the original on September 27, 2018. Retrieved April 13, 2011.
  24. ↑ "Lessons Learned From HP's Pretexting Case". InformationWeek. June 29, 2007. Archived from the original on July 29, 2019. Retrieved April 13, 2011.
  25. 1 2 "First 'Pretexting' Charges Filed Under Law Passed After HP Spy Scandal". Wired News. January 9, 2009. Archived from the original on November 7, 2012. Retrieved April 13, 2011.
This page is based on this Wikipedia article
Text is available under the CC BY-SA 4.0 license; additional terms may apply.
Images, videos and audio are available under their respective licenses.