Jump to content

User:Gscarp12/sandbox

From Wikipedia, the free encyclopedia

Sean Bodmer is a former US government federal employee, defense contractor, whistleblower, and author who uncovered a massive computer intrusion and exploitation cyberespionage while assigned to the Department of Homeland Security from his employer, UNISYS. Corporate management was widely accused of keeping the intrusion from government officials at DHS, but Bodmer was insistent. After verifying his findings with two colleagues, in the interest of national security, he bypassed UNISYS and went straight to DHS senior management. The whole incident exploded at the national level and was reported widely in England also. Bodmer ended up being subpoena'ed by Congressional committees and was marginalized by UNISYS management. He was not fired, but he was put in a position where he had no interaction with the customer DHS to limit the level of liability UNISYS would face in this incident while ensuring Bodmer was not treated unfairly according to federal whistleblower regulations.

Carpenter was an employee of Sandia National Laboratories, investigating security breaches in its networks. However, upon tracking several breaches of Sandia, Lockheed Martin Corporation, Redstone Arsenal, and even NASA, dating back to 2003, Carpenter noticed patterns that began to appear to link the attacks to a single group. He was also impressed by the meticulous, voracious, and incredibly fast manner (sometimes completed in less than 30 minutes) in which the hackers operated. Such observations led him to alert the federal government of his findings.

The Titan Rain hacking operation was first reported in an August 25, 2005 Washington Post article by Bradley Graham, which didn't mention Carpenter. Graham listed anonymous governmental officials as his sources.

After informing his supervisors of the breaches, he was told that his only concern was Sandia computers, and to drop the issue. His employment was later terminated when Carpenter disobeyed his management and communicated the information about the security breaches to the United States Army and the FBI. He was a confidential informant for the FBI for almost half a year before Sandia discovered his actions. Carpenter reportedly felt betrayed by the termination, as he viewed his actions were a service to his country, similar to that of his previous military service.

According to Carpenter, during his termination hearing at Sandia, Bruce Held, Sandia's Chief of Counterintelligence, yelled "[you're] lucky you have such understanding management... if you worked for me, I would decapitate you! There would at least be blood all over the office!"[1] During the subsequent court case, Held testified that he did use the word "decapitate" and, while he did not recall using the word "blood", would not contest it. He also apologized.[1]

He sued Sandia National Laboratories for wrongful termination and defamation; a jury awarded him almost $4.7 million in compensatory and punitive damages on February 13, 2007. The jury more than doubled the punitive damages requested by Carpenter attorneys Thad Guyer, Stephani Ayers and Philip Davis. The 13-person New Mexico state district court jury determined that Sandia's handling of Shawn Carpenter's termination was "malicious, willful, reckless, wanton, fraudulent or in bad faith." Juror Ed Dzienis said that, "If they (Sandia) have an interest in protecting us, they certainly didn't show it with the way they handled Shawn." Ms. Alex Scott, the jury forewoman, said jurors were upset by the lack of documentation of the process and by the "reckless behavior on the part of Sandia to not have adequate policies in place for employees about hacking, and the cavalier attitude about national security and global security."

Carpenter's wife, Dr. Jennifer Jacobs, testified at the trial. Dr. Jacobs, a former Sandia scientist, nuclear engineer, West Point graduate, and Army Reserve Major, said Sandia management questioned her loyalty to the company after her husband was fired. Dr. Jacobs left Sandia and was later appointed as a White House Fellow, and was a Director at the United States National Security Council. In an interview with the Albuquerque Journal, Dr. Jacobs stated, "The point for us all along was this is bad for the country to have contractors like Sandia Corporation behaving this way -- with impunity. And if other citizens don't do this, it's the beginning of the end for our country. That's what we kept coming back to: This is what we have to do, because it's what we expect of others."

Sandia Corporation, the private entity that manages Sandia National Laboratories on behalf of the National Nuclear Security Administration, the Department of Energy and Federal Government of the United States, is a wholly owned subsidiary of the for-profit Lockheed Martin Corporation.

In an ironic twist, Carpenter testified at trial that he found hundreds of pages of detailed schematics and other sensitive documents labeled, "Lockheed Martin Proprietary Information" and "Export Controlled" regarding the Mars Reconnaissance Orbiter stashed on a foreign server in South Korea. He was helping the FBI investigate the stolen Lockheed Martin information along with hundreds of other network breaches at military and United States defense contractors when Sandia officials fired him.

As of March 2007, Carpenter is employed at NetWitness Corporation, a startup headed by Amit Yoran, former director of the National Cyber Security Division within the United States Department of Homeland Security.

In March 2007, Sandia National Laboratories retained three additional attorneys at the international corporate defense firm of Baker Botts. In post-trial motions, Sandia attorneys unsuccessfully argued to throw out the jury verdict, to reduce the judgment to zero, and for a new trial. Carpenter's attorneys successfully argued a motion for post-judgment interest, and Sandia was ordered to pay an interest rate of 15% per year on the final judgment of $4,742,146.66 (plus attorney fees) during the appeals process.

In April 2007, Sandia attorneys filed a motion to appeal the jury verdict. Sandia National Laboratories posted a $5.8 million supersedeas bond to prevent Carpenter from seizing Sandia assets during the appeals process. Interest in the amount of almost $60,000 a month accumulates while Sandia pursues their appeals. According to news reports, Sandia plans to appeal to the New Mexico Supreme Court, if necessary, which could take years.

On October 14, 2007, The Albuquerque Journal published a story ("Analyst, Sandia Settle Suit") that stated that Sandia had dropped its appeal of the verdict.[2] According to the story, the judgment had been accumulating 15 percent interest since the verdict in his favor in February 2007. The piece also related that Carpenter continues to work in the national security area for clients in the intelligence community, federal agencies and the military.

See also

[edit]

References

[edit]
  1. ^ a b Q&A: Reverse hacker describes ordeal (Computerworld)
  2. ^ Analyst, Sandia Settle Suit (Albuquerque Journal)
[edit]


Category:People associated with computer security Category:American computer scientists Category:American whistleblowers Category:Chinese intelligence operations in the United States Category:Living people Category:1968 births

Retrieved from "https://en.wikipedia.org/enwiki/w/index.php?title=User:Gscarp12/sandbox&oldid=727713553"