Of all the tactics used by hacker collective Anonymous in any of its “operations”, the release of their victims' emails has been one that potentially could cause the most damage.
Previous releases have claimed the job of Aaron Barr – former CEO of security firm HBGary – and unveiled the covert operations of intelligence analysis firm Strategic Forecasting Inc. (STRATFOR).
Most recently, media sites have claimed the hacking and release of emails of military law firm Puckett & Faraj by Anonymous would effectively destroy the company.
By comparison, other hacktivist tactics (such as the release of usernames, passwords or credit card information) are annoying and inconvenient, but essentially transient in their impact. Passwords can be changed, credit cards can be replaced and money refunded.
Intuitively, you would expect the release of internal communications of a company to be potentially devastating. There is the likelihood of revealing unknown secrets to the public and interested parties. At the very least, the truth of what lies behind the corporate image portrayed to the public is laid bare.
What WikiLeaks taught us
In recent times, the world has witnessed the impact of the release of about 250,000 US diplomatic cables on WikiLeaks.
But despite the potential and the perception, does the release of this sort of communication really do that much damage? Commentators have long been dismissing the actual impact of the release of the cables on WikiLeaks.
As Anatol Lieven, professor in the War Studies Department of King’s College London commented at the time: “it was hardly news that US officials privately despise Hamid Karzai and believe that his family are deeply involved in the heroin trade”.
Others have also questioned the impact, if any, of the cables' release. Some have even argued that the cables' release actually helped the US by debunking conspiracy theories about its foreign policy.
Would-be leakers face several challenges when trying to capitalise on the information they have obtained. The biggest is actually sifting through millions of emails or internal documents for significant and interesting content.
It is a massive task and one that takes time, resources and money. The other problem is to get anyone to actually act on the information. This is made all the harder if you are attacking organisations that have close links to the agencies that would normally prosecute any perceived wrongdoing.
In the case of the high-profile hacks by Anonymous, were the outcomes as damaging as the victims and the media claimed?
Aaron Barr: death of a CEO
Anonymous’s initial success with the release of corporate emails was in February 2011 with the hack and making-public of emails from security firm HBGary Federal and HBGary Inc.
The hack was prompted by a report in the Financial Times in which Aaron Barr, CEO of HBGary Federal, claimed he was about to identify leaders of Anonymous.
After the publication of the emails and the highlighting of its varied revelations, Barr resigned.
The full revelations of the HBGary emails brought to light a “dirty tricks campaign” aimed at WikiLeaks involving not only HBGary Federal but other firms, potentially at the behest of the Bank of America.
HBGary Inc appears to have come out of the episode largely unscathed. The company quickly distanced itself from HBGary Federal and claimed the actions were entirely the doings of Aaron Barr.
Rather than losing customers, HBGary claimed to have “ended up getting additional business”.
In fact, Anonymous may have also ended up doing HBGary an additional favour in helping the company divest itself of Aaron Barr, who was increasingly being described as “embattled”.
STRATFOR: uncovering an intelligence conspiracy?
Christmas definitely did not arrive for STRATFOR. The company’s site was hacked by Anonymous on Christmas Eve, its website defaced, more than 2GB of emails removed, and the STRATFOR private subscriber list and details of 90,000 credit cards from subscribers taken. The stolen credit card details were allegedly used to make donations to various charities.
There have been claims the STRATFOR emails would reveal the company was carrying out more specific and possibly covert intelligence-gathering than it had publicly admitted.
This was denied by George Friedman, STRATFOR’s founder and CEO who said: “as they search our emails for signs of a vast conspiracy, they will be disappointed”.
STRATFOR is now facing a class-action lawsuit demanding US$50m in damages for failing to secure its computer systems and encrypt credit card information.
As for the impact on the company, there has been the cost of offering all of its subscribers identity theft protection.
Apart from that, interestingly, the firm has earned some respect for the way in which it dealt with the hack, and actually sympathy from the public for its victim status.
Puckett & Faraj: Semper Fidelis (always faithful)
Puckett & Faraj is the law firm that defended Frank Wuterich for his role in the Haditha massacre in which 24 unarmed Iraqi men, women and children were killed by US Marines.
Wuterich, accused of negligent homicide in the deaths of two women and five children, escaped with a demotion to private and was only charged with dereliction of duty.
Anonymous became incensed by the iniquity of a justice system that failed to prosecute a US marine who admitted his role in killing civilians while Bradley Manning, the soldier at the heart of the WikiLeaks prosecution, faced life imprisonment. Anonymous hacked the website of Puckett & Faraj and released 2.6GB of emails and documents.
Some of the emails have shown the extent to which the firm, run by former marines, lobbied influential military personnel and congressmen to assist in “making this whole case go away”.
Although there were initial suggestions the hack and release of emails could destroy the firm, the website at least is back up, albeit showing content that is out-of-date.
As with the view that WikiLeaks may have actually helped the US with the release of diplomatic cables, the exposure by Anonymous of underhand dealings of a law firm may have also perversely served to promote the company.
In the system of US military justice that appears to have already foregone an ethical basis and is already comfortable with backroom deals, the revelations will come as no surprise and certainly would not put off potential customers seeking to escape prosecution. In fact, it would likely do quite the reverse.
Did it make a difference?
In all three of the Anonymous hacks, the companies not only survived but actually seemed to benefit from the potentially catastrophic events. That’s not to say they all came out of the process with their integrity intact.
HBGary Federal was uncovered for attempting to run a dirty tricks campaign against WikiLeaks. STRATFOR was shown up for its cavalier handling of customers’ credit cards. The hack of Puckett & Faraj highlighted the case of Haditha and the US Marines’ involvement in the deaths of 24 unarmed Iraqi civilians.
Another highlighted aspect is that, in a world where the personal is increasingly public, the impact of revealing another’s private life is rapidly diminishing.
In the same way we remember little of what WikiLeaks released, the targets of Anonymous will continue to thrive, possibly having implemented more secure systems and, of course, thinking twice about what they put in writing.
Join the conversation
Comments (8)
Byron Smith
(PhD candidate in Christian Ethics at University of Edinburgh)
"But despite the potential and the perception, does the release of this sort of communication really do that much damage? Commentators have long been dismissing the actual impact of the release of the cables on WikiLeaks."
Revelations associated with WikiLeaks have frequently been cited as making a contribution to the Arab Spring, a perspective reflected in the fact that both Assange and Manning received nominations for the 2011 Nobel Peace Prize (http://uk.reuters.com/article/2011/09/27/uk-norway…
show full comment
David Glance
(Director, Centre for Software Practice at University of Western Australia)
Hi Byron,
Yes, good comment. The comparison really was focussed on the cable dump and made the observation that our expectations when it comes to corruption and unethical behaviour have shifted - so less comes as much of a surprise. Personally, I am a supporter of freedom of information and would have hoped that information leaks, whether through Anonymous or Wikileaks would have the impact that they deserve - it just doesn't always work out that way.
David
Byron Smith
(PhD candidate in Christian Ethics at University of Edinburgh)
David, thanks for your reply. I realised after I posted this comment that your focus was on the cables release and so some of these examples are of only indirect relevance. Nonetheless, even from the cables came events including the downfall of administrations, multiple revolutions, and the ending of a major war. In each case, the cables were far from the only factor, but (according to various experts) they played some kind of precipitating role, frequently representing the straw that broke the camel's back, or final confirmation of what had been long suspected.
Con Zymaris
Untethered Polymath (logged in via email @cyber.com.au)
Byron,
if only all coverage of this topic by traditional 'professional' media was as well-versed and as insightful as your comment :-)
-- Con
Matt Stevens
Senior Research Fellow/Statistician (logged in via email @gmail.com)
It seems pretty clear that Anonymous are all about freedom of information and this reflects that fact that people are sick of those in power withholding information. Sometimes it will be damaging, sometimes it will not. It is, as a phenomena reflecting the wish of the public (or interested public) to know more about the machinations that occur in producing decisions that ultimately affect their life in one way or another. It is not so different to the public demanding more accountability of governments (i.e. the people with power, along with big business) and this has occurred in developed economies over the years. Yet, as journalists know, we still have to fight to get this information, whether through FOI or through hacking or through insiders who leak, either for money or conscience. And, I am sure this also relates to the recent formation of the new religion about FOI that has sprung up recently in Sweden - The church of Kopimism - New Religion based on copying information.
William Bruce
Artist (logged in via email @iprimus.com.au)
Seems clear Iraq was a massive criminal act of invasion. It was all based on premeditated and fabricated lies. Why no proper investigations and/or prosecutions all the way to the top?
Instead we have these "Anti-terror laws" which are about silencing dissent and legalising our Govt. spying on all of us. However these laws arev really about the continuance of more "wars of Choice"? Humanitarian Wars? Democracy Wars? C’mon?
So now along with these “police state” & “military dictatorship” style…
show full comment
Paul Richards
(logged in via Facebook)
Anonymous, WikiLeaks and email dumps – the ultimate weapon?
Yes, information always has been and always will be the - ultimate weapon.
It was information the prevented all out nuclear holocaust during the Cuban Missile Crisis in October 1962.
There are currently eight states that have successfully detonated nuclear weapons. Five are considered to be "nuclear-weapon states", it is information that prevents a nuclear winter and the extinction of life on earth.
How many nuclear weapons…
show full comment
Antonio Manuel Santos Cristovao
(logged in via Facebook)
Who believes in St Klaus don't need know if exist or don't exist God.