UK Drops Charges Against US Hacking Suspect Love

UK Drops Charges Against US Hacking Suspect Love
UK Drops Charges Against US Hacking Suspect Love

A British man wanted by the US authorities for hacking into government computers has been released from bail by the UK National Crime Agency (NCA) with no charge.

Lauri Love, 28, of Stradishall, Suffolk, was arrested back in October 2013 on suspicion of hacking US Army, military and government computers. He was subsequently charged by the FBI with hacking the Federal Reserve.
 
Love was suspected of breaking the 1990 Computer Misuse Act, which outlaws malicious intrusion into computers, no matter where in the world the targeted machines are, according to the BBC.
 
“The CPS provided investigative advice on the available evidence. The NCA then made the decision to release the man from bail," a Crown Prosecution Service (CPS) spokesman said.
 
Love’s legal team apparently wanted him to face any charges in the UK, but Friday’s news would seem to have scuppered that prospect.
 
This possibly leaves the way open for another protracted extradition case likely to reignite anger over current laws, which campaigners say unfairly favour the US.
 
Between October 2012 and October 2013, Love and his co-conspirators hacked thousands of computers belonging to, among others, the US Army, Missile Defense Agency, Environmental Protection Agency, and NASA, according to an indictment filed by the New Jersey US Attorney’s Office in October 2013.
 
They are accused of placing backdoors on the networks, returning to them later to steal confidential data including personal information on military servicemen and women. The US authorities claim the incidents cost millions of dollars to fully remediate.
 
Last Thursday, a separate indictment was filed by a federal grand jury in the Eastern District of Virginia – charging Love with conspiracy, causing damage to a protected computer, access device fraud and aggravated identity theft.
 
It alleges he and others exploited an Adobe ColdFusion vulnerability to gain administrator level access to the servers of the Department of Energy, Department of Health and Human Services, US Sentencing Commission, the FBI’s Regional Computer Forensics Laboratory, Deltek and Forte Interactive.
 
Love stole more than 100,000 employee records including names, Social Security numbers, addresses, phone numbers and salary information, along with more than 100,000 financial records, including credit card numbers and names – incurring losses of over $5m, the indictment alleged.
 
Love faces up to 12 years in a US prison if convicted in Virginia, not to mention the separate indictments on related charges in New Jersey and New York.

What’s hot on Infosecurity Magazine?