Hickton: Bringing hackers of Pittsburgh companies to trial not impossible
Bringing Chinese and Russian hackers to trial in Pittsburgh will not be easy, but U.S. Attorney David Hickton told the Tribune-Review on Wednesday he rejects the idea that it cannot be done.
“We're going to use every legal and diplomatic means we can to bring them to justice in this building, in this courthouse,” said Hickton, who represents the Western District of Pennsylvania. “I believe it will be harder to do than if they lived in Western Pennsylvania; I accept that. But it is not futile. And it's an effort we're going to undertake.”
Hickton talked with the Trib two days after charging Russian hackers with infecting as many as 1 million computers around the world and stealing more than $100 million with online attacks.
Two weeks earlier, Hickton was in Washington to indict Chinese military hackers for stealing computer secrets from U.S. companies, including some in Pittsburgh.
The cases represent a shift in policy toward building criminal and civil cases against foreign hackers — and going public with the accusations. Legal experts said that puts criminals and foreign countries on notice.
Hickton agreed: “By bringing the criminal charges, we've signaled that we're escalating our effort to protect people from cyber crime.”
The cases pressure foreign governments to take computer security more seriously, said Joseph DeMarco, former head of the cyber crime unit at the U.S. Attorney's Office in New York.
“It does tend to signal to our adversaries that we will use all of the tools at our disposal to shame them into having to take account of what they did,” said DeMarco, whose law firm, DeVore & DeMarco, specializes in Internet and privacy matters.
Though the prosecutions are a first step, the United States will have difficulty convincing China and Russia to hand over the accused, said David Thaw, a cyber law expert at the University of Pittsburgh School of Law.
“It has a signaling effect of showing that the U.S. continues to be serious about cyber crime enforcement and that it will treat all criminal activities — regardless of whether they are individuals, organized crime or state-sponsored — as valid targets of prosecution,” Thaw said. “In these particular two cases, it probably stops there.”
Hickton told the Trib he chose to pursue the cyber cases even though federal investigators did not know whether they would “have enough fuel in the tank” to bring charges.
He said the focus on cyber crimes could affect the number of other cases his office handles. At one point, 20 percent of the lawyers in his office were working on criminal and civil cyber cases.
“I thought it was worth the risk, because I believe this is the new frontier of crime,” Hickton said. “Even if we didn't get to the finish line, like we did, it was still worth the effort for the greater good.”
Speaking separately in Pittsburgh on Wednesday, former CIA Director and Secretary of Defense Leon Panetta called cyber attacks one of the most pressing threats against national security. He said the threat extends beyond criminals to include terrorists.
“We're living with a battlefield of the future,” Panetta told members of the natural gas industry in the David L. Lawrence Convention Center, Downtown.
As CIA director, he was told the country endured 100,000 cyber attacks a day.
Hickton said he hopes other countries will take a more active role in policing online crimes, as computer attacks have become a big, international problem. To neutralize the Russian hacking schemes, his office worked with officials from 12 countries and the European Union.
In response to the indictments, the United States asked China and Russia to help apprehend the suspects. Hickton said those talks are “fluid” and declined to comment on specifics.
“Everybody has an interest in following the rule of law, with regard to intellectual property and use of the Internet,” he said.
Andrew Conte is a Trib Total Media staff writer. Reach him at 412-320-7835 or firstname.lastname@example.org. Staff writer David Conti contributed to this report.