Feeds

FBI faked terror alerts to get phone records

Subpoena scamola spilled

The essential guide to IT transformation

The FBI fabricated terrorism emergencies to obtain thousands of phone records between 2002 and 2006, it's been revealed.

The Bureau created "exigent letters" to get around rules that had already been significantly loosened by the Patriot Act. The letters were used to obtain some 2,000 phone records, The Washington Post reports.

Washington Post and New York Times journalists were among the targets.

The internal concerns were confirmed in emails that are part of an investigation by the Justice Department's inspector general, which is due to report this month.

As well as fabricating emergencies, FBI counter-terror investigators obtained phone records by simply leaning on operators, getting approval after the fact with blanket authorisations.

The Patriot Act allowed investigators to effectively self-certify their requests for communications data, using a "National Security Letter" (NSL), a type of subpoena without judicial oversight. The Justice Department has found that by fabricating emergencies and sending NSLs after it had obtained phone records, the FBI violated what civil liberties protections remained.

In response, the FBI claimed that although it did not follow statutory process to obtain the records, they were all legitimate targets for investigation.

"The [Justice Department] report is not expected to find — nor were there — any intentional attempts to obtain records that counterterrorism personnel knew they were not legally entitled to obtain," said assistant director of public affairs Michael Kortan.

He added all the numbers obtained have been deleted and that "steps were taken as early as 2006 to ensure similar situations do not occur in the future". However, The Washington Post said it had seen emails showing FBI lawyers sounded the alarm in 2005.

The US NSL system is similar to the UK's Regulation of Investigatory Powers Act (RIPA) regime for authorities to obtain communications data from phone companies and ISPs. Each has no judicial oversight and investigators effectively self-certify their requests.

The UK system is much broader, however, with no requirement that national security is threatened and many more agencies, such as local councils, empowered to access records.

Oversight is provided by a former High Court judge appointed by the Prime Minister, who produces an annual report. In 2008, the most recent available, he says that 595 errors were made but added: "I am not convinced that any useful purpose would be served by providing a more detailed report of these errors."

The government is developing a major extension to communications surveillance that would require internet firms to retain huge amounts of extra data, under the Interception Modernisation Programme. Ministers have argued that that RIPA will be sufficient to govern access to the newly available terabytes of private information. ®

5 things you didn’t know about cloud backup

More from The Register

next story
Munich considers dumping Linux for ... GULP ... Windows!
Give a penguinista a hug, the Outlook's not good for open source's poster child
UK fuzz want PINCODES on ALL mobile phones
Met Police calls for mandatory passwords on all new mobes
e-Borders fiasco: Brits stung for £224m after US IT giant sues UK govt
Defeat to Raytheon branded 'catastrophic result'
Yes, but what are your plans if a DRAGON attacks?
Local UK gov outs most ridiculous FoI requests...
Detroit losing MILLIONS because it buys CHEAP BATTERIES – report
Man at hardware store was right: name brands DO last longer
Snowden on NSA's MonsterMind TERROR: It may trigger cyberwar
Plus: Syria's internet going down? That was a US cock-up
UK government accused of hiding TRUTH about Universal Credit fiasco
'Reset rating keeps secrets on one-dole-to-rule-them-all plan', say MPs
Caught red-handed: UK cops, PCSOs, specials behaving badly… on social media
No Mr Fuzz, don't ask a crime victim to be your pal on Facebook
EU justice chief blasts Google on 'right to be forgotten'
Don't pretend it's a freedom of speech issue – interim commish
prev story

Whitepapers

5 things you didn’t know about cloud backup
IT departments are embracing cloud backup, but there’s a lot you need to know before choosing a service provider. Learn all the critical things you need to know.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Build a business case: developing custom apps
Learn how to maximize the value of custom applications by accelerating and simplifying their development.
Rethinking backup and recovery in the modern data center
Combining intelligence, operational analytics, and automation to enable efficient, data-driven IT organizations using the HP ABR approach.
Next gen security for virtualised datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.