Leaked docs show NSA collects data on all Verizon customers
The Patriot Act strikes again
The USA's National Security Agency (NSA) has harvested all the call data from US mobile provider Verizon since April, according to a secret court order leaked to The Guardian.
The order was granted by the Foreign Intelligence Surveillance Court on April 25 and instructs Verizon to hand over the "session identifying information (e.g., originating and terminating telephone number, International Mobile Subscriber Identity (IMSI) number, International Mobile station Equipment Identity (IMEI) number, etc.), trunk identifier, telephone calling card numbers, and time and duration of call."
The three month order is set to terminate on July 19 but it may be part of a rolling court requirement for Verizon and could be renewed. It is not known if other US telecommunication companies are operating under similar strictures and handing over their customer data, but such orders usually bar the recipient from discussing their imposition.
"We've certainly seen the government increasingly strain the bounds of 'relevance' to collect large numbers of records at once - everyone at one or two degrees of separation from a target - but vacuuming all metadata up indiscriminately would be an extraordinary repudiation of any pretence of constraint or particularized suspicion," said Julian Sanchez, a surveillance expert with the Cato Institute.
The month after the September 11 attacks then-President George W. Bush ordered the NSA to start surveillance of US phone records and phone companies like AT&T had uplinks installed at their exchanges to funnel data to the electronic spying agency. Bush also retroactively granted the telecommunications industry immunity from litigation after the news leaked out.
It now appears that the NSA is instead simply getting telecos to hand over the information wholesale, using the "business records" provision of the Patriot Act, 50 USC section 1861. This allows the seizure of "including books, records, papers, documents, and other items" without the authorities having to provide any evidence that the target is committing an offence, and was renewed by President Obama in 2011.
"Under Section 215 the FBI can investigate United States persons (citizens and legal residents) based at least in part on their exercise of First Amendment rights, and can investigate non-U.S. persons based solely on their free speech activities or religious practices," said the EFF.
"You could be investigated based on the political or religious meetings you attend, the websites you visit or even the books that you read. Already, attendance at and donations to mosques have dropped significantly, as many Muslims reasonably fear that they will be targeted for investigation based solely on their religious beliefs."
Verizon has said it has no comment on the matter, nor too does the White House, the Department of Justice, or the NSA itself. El Reg would suspect a fair few Americans will have plenty of comments, but sadly they won’t be printable. ®
If true, the recording of all calls makes the "Call Connected Through the NSA" ringtone created by New York–based pop group They Might Be Giants eerily prescient. You can hear the ringtone below, or download a free MP3 here and make it your own!
Sponsored: Becoming a Pragmatic Security Leader