[ISN] Young hacker charged again

From: InfoSec News (isnat_private)
Date: Mon Aug 11 2003 - 00:22:43 PDT

  • Next message: InfoSec News: "[ISN] Linux Advisory Watch - August 8th 2003"

    http://www.enquirer.com/editions/2003/08/10/loc_hacker10.html
    
    By Jennifer Edwards
    jedwardsat_private
    The Cincinnati Enquirer
    August 10, 2003 
    
    A 24-year-old Milford hacker accused of breaking into one of the
    world's largest consumer database companies has been charged three
    other times this year for similar crimes and is expected to be charged
    federally soon, according to court records and authorities.
    
    Daniel J. Baas appeared in Hamilton County Municipal Court Saturday on
    the fourth and most recent charge of unauthorized use of property. He
    remains jailed on $120,000 bond at the Hamilton County Justice Center.
    
    When Baas appeared before Municipal Judge Nadine Allen Saturday on his
    latest charge, Sheriff's Detective Rick Sweeney of the county's
    Regional Electronic Computer Investigative unit told the judge that
    Baas soon would be charged federally.
    
    Prosecutor Mike Allen said hacking into businesses to get corporate or
    trade secrets is an insidious problem.
    
    "Businesses have to feel secure that their information stays
    confidential. You just can't have someone hacking into a business's
    confidential information," he said. "It's really no different than
    someone breaking into an office and stealing files."
    
    While Hamilton County sheriff's detectives won't comment on their
    investigation of Baas, officials at the Arkansas-based Acxiom Corp.,
    one of the world's largest consumer database management companies,
    have said sheriff's officials notified them recently of a computer
    breach.
    
    The company also was told a hacker had been arrested in connection
    with accessing the computer systems on Acxiom and other companies.
    
    Baas' Friday arrest record states he entered a computer belonging to
    Acxiom on Dec. 10, without authorization or consent and copied
    information. Evidence was recovered, and additional charges are
    pending, according to the arrest report. That case goes to a grand
    jury Aug. 18.
    
    Company officials say the hacker gained access to information about a
    small percentage of customers of Acxiom's clients. All of the
    information was encrypted, and none appears to have been used for
    illegal purposes, they said.
    
    The hacker is a former employee of an Acxiom client, the company said.
    
    On Friday, Baas was indicted on two counts stemming from an Aug. 1
    arrest. In that case, officials allege that on April 10 he illegally
    accessed the computers of his then-employer, Market Intelligence Group
    LLC, in downtown Cincinnati, according to court records. He is due in
    court on those charges Monday.
    
    He was fired from Market Intelligence on June 3, the same day the
    sheriff's office notified his employer he was under investigation,
    said Robert Migliara, the company's president.
    
    "We were unaware of his misuse of computers and property, absolutely,"  
    Migliara said.
    
    Baas worked for the small Web hosting company with three employees for
    21/2 years as the network administrator in Web applications, Migliara
    said. Baas set up office computer systems, he said.
    
    He was charged with the same crime against an unnamed company on June
    3, also for another April 10 offense, records show. In that case, Baas
    is accused of hacking into the computer database of an unnamed company
    and providing "personal information regarding a subject's name and
    home address and telephone number without the consent or permission of
    the owner," records show.
    
    A man and a woman Sweeney identified in court as Baas' parents
    attended Saturday's brief proceeding but declined to answer a
    reporter's questions. The man stressed to the judge that Baas turned
    himself in Aug. 1.
    
    Ryan DeMougin, 25, of Mount Carmel, who was in the courtroom Saturday,
    called Baas a friend and said he is "really into computer security."  
    But, DeMougin stressed, he didn't think Baas would use his skills to
    break the law.
    
    "He's not malicious at all. He's a very curious person," DeMougin said
    of Baas.
    
    Just before Baas' Aug. 1 arrest, DeMougin said, Baas called him,
    indicating he was going to turn himself into authorities.
    
    DeMougin said he thought Baas was acquainted with Jessie Tuttle, the
    internationally known "Hackah Jak" from Camp Dennison who is charged
    with breaking into Hamilton County's computer network. Tuttle's
    attorney has said Tuttle has been a paid informant for federal
    authorities for nearly two years. The FBI, as a matter of routine,
    does not discuss its informants.
    
    Tuttle declined to comment Saturday on Baas other than to say he
    doubted Baas, whom he says is known online as "Epitaph" or "Eppy" for
    short, would sell the information or do something harmful with it.
    
    The two men have chatted online, had an "occasional friendship" and
    once met at one of the monthly meetings of a computer hacker club
    called Cincinnati 2600 at Cody's Cafe in Clifton, Tuttle said.
    
    
    
    -
    ISN is currently hosted by Attrition.org
    
    To unsubscribe email majordomoat_private with 'unsubscribe isn'
    in the BODY of the mail.
    



    This archive was generated by hypermail 2b30 : Mon Aug 11 2003 - 02:50:35 PDT