You are not authorized to post comments.

TorrentSpy names hacker and details attack

By Nancy Gohring, IDG News Service |  Security Add a new comment

TorrentSpy named the hacker who it claims broke into its computer systems on behalf of the Motion Picture Association of America (MPAA), as part of a legal request that would force the MPAA to turn over documents stolen from the Internet file-searching company.

TorrentSpy accused the MPAA in May of paying a hacker US$15,000 to steal confidential company information, including e-mails and passwords for accessing TorrentSpy's servers. The MPAA has called the charges baseless.

On Thursday, TorrentSpy asked the U.S. District Court, Central District of California, to require the MPAA to hand over any documents it acquired and reveal who has seen them. If the court grants the request, made as part of the discovery stage of the case, the MPAA will have 10 days to comply.

TorrentSpy included with its court filing a declaration from Robert Anderson, the hacker allegedly hired by the MPAA, detailing his activities and his ties to TorrentSpy.

Anderson describes himself as an "acquaintance" of Justin Bunnell, a principal of the company that runs TorrentSpy.com, who did some marketing work in 2004 and 2005 for a company Bunnell was involved with. The two parted ways in April last year, when Anderson stopped working for the company and became "upset" with Bunnell, he said in his declaration.

Two months later, Anderson contacted the MPAA and offered to provide it with information about TorrentSpy, he said. The court filing includes a document described as a contract signed by the MPAA and a bogus company, representing Anderson, that includes the MPAA's agreement to pay Anderson the $15,000 for his services.

Anderson says the MPAA "knew, or reasonably should have known," that he was not authorized to obtain the information he did, which also included e-mails, client billing information, IP (Internet protocol) addresses of servers, a cashflow spreadsheet and a personal utility bill of one of the company's principals.

He also names a private investigator firm that he allegedly helped hire on behalf of the MPAA to comb through Bunnell's trash and that of other TorrentSpy associates.

The MPAA didn't immediately respond to a request for comment Friday morning. In the past it has described the claims as "baseless" and accused TorrentSpy of filing its lawsuit in retaliation against earlier suits filed by the MPAA.

The MPAA filed several lawsuits earlier this year in an effort to shut down Web sites operated by companies, including TorrentSpy, that help users find digital music and video files online.

TorrentSpy operates a search engine that allows users to find files that can be shared using BitTorrent Inc.'s file sharing system. TorrentSpy argues that it only helps users find files but doesn't actually offer content itself, so it can't be held liable for users who download illegal content.

Those suits, and the action initiated by TorrentSpy regarding the hacker allegations, are ongoing.

ITworld LIVE

SecurityWhite Papers & Webcasts

Webcast On Demand

Seven Deadly Sins of Cloud Security (Video)

As cloud computing gains popularity, too few people are aware of the security threats that are emerging. In this short video, experts from HP discuss the latest cloud security threats and explain measures to help overcome them. Hear about the seven deadly sins of cloud security and learn how to avoid becoming a victim of poor security in your cloud environment.Intel and the Intel logo are trademarks of Intel Corporation in the U.S. and/or other countries.

Sponsor: HP & Intel

White Paper

Establishing a Strategy for Database Security is No Longer Optional

The options for securing increasingly valuable databases are very broad and deep, and can be confusing. This research provides an overview of three categories of controls that should be implemented to ensure that enterprise data is protected in the most efficient and effective manner.

White Paper

Database Activity Monitoring Is Evolving

Read the analyst report and learn how you can leverage the core capabilities of a DAP solution for better database security.

White Paper

Protecting Against Database Attacks and Insider Threats: Top 5 Scenarios

Read this new eBook to learn the top five scenarios and essential best practices for preventing database attacks and insider threats.

Webcast On Demand

Distributed Database Security with Real-time Monitoring

View this demo and learn how IBM InfoSphere Guardium database activity monitoring can help protect your sensitive data in distributed DBMS environments with a holistic approach to data security and compliance.

Sponsor: IBM

See more White Papers | Webcasts

Ask a question

Ask a Question