◆ SpookStack

@ @ for: (1) “NEW YORK TIMES HACKER’ ; (2) “HACKER AND DATE GEQ 02/26/2002";* and (3) “ADRIAN LAMO.” (c) LexisNexis searches using the unauthorized accounts were performed as late as March 20, 2002. 13. In the course of my investigation I have read various articles regarding the New York Times hack, including the following: (a) An article published on February 26, 2002 on the website SecurityFocus.com reported that ADRIAN LAMO, the defendant, admitted having accessed the New York Times internal network through a proxy server and viewing, among other things, a database of employees’ names and Social Security numbers. According to the article, LAMO is reported to have stated that with respect to the New York Times intrusion, “The very first server I looked at was rumming an open proxy.” LAMO continued: “The server practically approached me.” In explaining how he went about obtaining access .to the New York Times intranet, LAMO is reported to have stated that “{t]he proxy was on a different network, dealing with the management of subscription information, but it was trusted by their internal network.” Regarding the employee database that LAMO accessed from within the New York Times Intranet, LAMO stated that “[f]lrom what I have been able to tell, it was a backup database being used for research.” (b} An article published on February 26, 2002 in Newsbytes {a Washington Post web site) reported that ADRIAN LAMO, the defendant, acknowledged responsibility for the computer intrusion of the New York Times, and that Newsbytes had reviewed screen captures that depicted the New York Times’ “Everyone, Everywhere” newsroom contact database. (ec) An article published on February 27, 2002 by website Computerworld.com reported that ADRIAN LAMO, the defendant, acknowledged responsibility for the computer intrusion of the New York Times and that with respect to adding a record under the newsletters. a This query called for a search for all news articles dated February 2, 2002 that included the term “hacker.” -9- FBI(19-cv-1495)-235