State worker's child porn charges dropped; virus blamed

By Robert McMillan, IDG News Service |  Security, malware, virus Add a new comment

Prosecutors have dropped child pornography charges against a Massachusetts state employee after an investigation determined that his government-issued laptop was poorly configured and riddled with malicious software.

Michael Fiola, former investigator with the Massachusetts Department of Industrial Accidents (DIA), had been facing two-and-a-half years in prison after being charged last year with possession of child pornography.

Those charges were dropped on June 10 after an investigation by the Massachusetts Attorney General's office found that the state could not prove that Fiola had downloaded the images. "We could not meet our burden of reasonable doubt," said Jake Wark, a spokesman for Suffolk County District Attorney Daniel Conley.

The case shows how easy it is for someone to be charged with illegal computer activity that they may know nothing about, said Fiola's attorney, Timothy Bradl. "This type of thing could have happened to anyone with a work-issued laptop," he said.

When the DIA issued Fiola his Dell Latitude laptop in November 2006, it was so badly configured that it may well have already been hacked, said Tami Loehrs, a forensics investigator hired by Fiola's defense team. The Microsoft Systems Management Server software on the laptop was misconfigured and was not receiving critical software updates, and the laptop's Symantec antivirus software was either misconfigured or not working properly, she said.

"He was handed a ticking time bomb," she said.

State IT staff examined Fiola's laptop in March 2007 after they noticed that his Verizon broadband wireless usage was four times above normal. He was fired the same month, after the pornography was discovered.

Fiola, a former firefighter with no criminal record, was ostracized by his community after being criminally charged in August 2007, Bradl said. "His life has been destroyed," he said. "His friends ran for the hills; his family mostly ran from him."

DIA spokeswoman Linnea Walsh was quoted in the Boston Herald on Monday saying, "we stand by our decision," but when reached by IDG News Service, she declined to comment on the matter, saying only "we don't want to go there right now," before abruptly hanging up the telephone.

Since his wife, Robin, was at one point hospitalized for a stress-related illness, Fiola is now facing health insurance payments in excess of his monthly mortgage. But he is unlikely to take his old job back, even if the DIA were to offer it, Bradl said. "I would think that theoretically he'd be entitled to his job back with back-pay, however he would never want to go back to work with such buffoons," he said.

Because of the heinous nature of child pornography, prosecutors and investigators often rush to conclusions while investigating this type of crime, Loehrs said. "Because the content is so disturbing, everybody just loses all sense of reality."

Take the case of Matt Bandy, who was 16 when police raided his house and charged him with possession of child pornography. The charges could have resulted in a 90-year jail sentence. Bandy eventually pleaded guilty to lesser charges, but computer experts believe that he may have been the victim of a worm that turned his PC into a "zombie computer" that was used by others to store the child pornography.

According to Wark, an initial state attorney general investigation of Fiola's laptop concluded that he was likely responsible for downloading the pornography, while a second examination, conducted after Loehrs reported her findings, reached the opposite conclusion.

    Add a comment

    Post a comment using one of these accounts
    Or join now
    At least 6 characters

    Note: Comment will appear soon after you have activated your account.
    Obscene/spam comments will be removed and accounts suspended.
    The information you submit is subject to our Privacy Policy and Terms of Service.

    ITworld LIVE

    SecurityWhite Papers & Webcasts

    White Paper

    Overcome Top 7 Admin Challenges of Active Directory

    As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable, enforceable processes that reduces administrative overhead and enables robust, customizable reporting and auditing capabilities. Brought to you by NetIQ.

    White Paper

    Insiders Can Ruin Your Company. Take Action.

    Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in organizations worldwide. This white paper from NetIQ, discusses key technology solutions that help to prevent and detect insider threats.

    White Paper

    Top Solutions and Tools to Prevent Devastating Malware

    Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring (FIM) tools that provide immediate alerts. This white paper has been brought to you by NetIQ, the leader in solving complex IT challenges.

    White Paper

    Streamline Compliance and Increase ROI

    Streamline, simplify, and automate compliance related activities; especially those that impact multiple business units. This white paper from NetIQ, outlines solutions that will help your business gain the maximum return on investment possible while aligning your compliance programs.

    White Paper

    X-Ray of the PCI Process-4 Proactive Steps

    This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into creating a compliant and secure IT environment. Follow these four proactive steps now before your next audit. Brought to you by NetIQ.

    See more White Papers | Webcasts

    Ask a question

    Ask a Question