Feeds

HP phone log black op tapped nine reporters

Hurd silent on growing scandal

Beginner's guide to SSL certificates

HP's spy fiasco went from bad to catastrophic yesterday, as the company admitted to having tapped the phone logs of nine reporters.

So far, two reporters from CNET and one from the Wall Street Journal have disclosed that their phone records were obtained by the company HP hired for its investigation into boardroom leaks.

Six other reporters were also probed, according to HP spokesman Ryan Donovan.

The California Attorney General's office has been notified of the journalists' involvement and is continuing to dig into the nature the spy operation via its own investigation.

"We believe that crimes have been committed," said Tom Dressler, a spokesman for the AG's office, in an interview with The Register.

HP has admitted to hiring a company to investigate which members of its board leaked information to reporters about the company's planning sessions. The hired investigators then tapped the services of another as of yet unnamed firm that employed a technique known as pretexting to gain access to the personal phone logs of both HP's directors and reporters. The firm's staff used personal information such as the directors' and reporters' Social Security numbers to trick phone companies into releasing the phone records.

Chairman Patricia Dunn okayed the internal investigation, but HP maintains that it told partners not to do anything illegal as part of the probe.

Pretexting is only considered a crime under federal law when it's used to obtain information from financial institutions. California, however, is considering charging those involved with the pretexting operation as violating three state statutes. Two of the statutes deal with unauthorised access to computer data and wrongfully copying the data, while a third covers the unauthorised access to personal identifiers such as Social Security numbers.

Those involved in the operation and found guilty under California law could face felony charges and three years in prison, Dressler said. The AG's office hopes to complete its investigation within "a couple of months".

Earlier this week, HP said that board member George Keyworth will not be put up for reelection, after outing him as the leaker. In addition, former board member Tom Perkins revealed that he quit HP's board in disgust after having learned of the secret spy operation.

"My history with the Hewlett-Packard Company is long and I have been privileged to count both founders as close friends. I consider HP to be an icon of Silicon Valley, and one of the great companies of the world. It now needs, urgently, to correct its course," Perkins said in a letter to HP.

HP has refused to disclose whether CEO Mark Hurd's phone records were tapped as part of its investigation. In addition, the company will not say how much Hurd knew about the internal probe. The CEO has failed to issue any statement on this matter, which has tarnished the company's reputation in the wake of solid recent financial reports.

One sideshow of note to this affair involves Verizon vice chairman Lawrence Babbio. It's suspected that Babbio, as one of HP's board members, had his phone records tapped. Verizon has been an outspoken critique of the pretexting practice and sought legal action against firms that use the technique.

A Verizon spokesman declined to comment on the HP situation.

Such silence has become all too common in the HP debacle. It's inexcusable at this point for Hurd not to deal publicly with the situation and for Dunn to stay on as chairman of the company.

HP, of course, had every right to make sure its directors were keeping proprietary information secret. At the moment, however, we know only that Dunn was upset about a CNET report where a director revealed he was tired after a planning session and admitted in January that HP hoped to sell a lot of computers based on AMD's chips. The directors' ages and a glance at HP's product line would confirm just as much. To conduct a secret witch hunt for such minor leaks was tragic form.

Even worse is HP's "we said not to do anything illegal" defense. Apparently, the company thought its highly paid investigators would use ESP to discover the leaker's identity. If HP is sticking with that defense, it should issue a clear timeline about who knew what when about the nature of the investigation.

Also curious was HP's decision to admit to spying on its directors in a filing this week with the US Securities and Exchange Commission, while failing to disclose the snooping on reporters. We can only assume the nine reporters will team to file a class-action lawsuit against HP and its partners, making briefings about new PCs rather awkward. ®

Choosing a cloud hosting partner with confidence

More from The Register

next story
MI6 oversight report on Lee Rigby murder: US web giants offer 'safe haven for TERRORISM'
PM urged to 'prioritise issue' after Facebook hindsight find
Assange™ slumps back on Ecuador's sofa after detention appeal binned
Swedish court rules there's 'great risk' WikiLeaker will dodge prosecution
NSA mass spying reform KILLED by US Senators
Democrats needed just TWO more votes to keep alive bill reining in some surveillance
'Internet Freedom Panel' to keep web overlord ICANN out of Russian hands – new proposal
Come back with our internet! cries Republican drawing up bill
What a Mesa: Apple vows to re-use titsup GT sapphire glass plant
Commits to American manufacturing ... of secret tech
prev story

Whitepapers

Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
Designing and building an open ITOA architecture
Learn about a new IT data taxonomy defined by the four data sources of IT visibility: wire, machine, agent, and synthetic data sets.
How to determine if cloud backup is right for your servers
Two key factors, technical feasibility and TCO economics, that backup and IT operations managers should consider when assessing cloud backup.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.