The cofounder of online news site Reddit has been charged with computer intrusion, fraud and data theft for allegedly stealing 4.8 million documents from a Massachusetts Institute of Technology network, the U.S. Department of Justice said.
In an indictment unsealed Tuesday, Aaron Swartz, 24, was charged in U.S. District Court for the District of Massachusetts with wire fraud, computer fraud, unlawfully obtaining information from a protected computer and recklessly damaging a protected computer.
If convicted, Swartz, who is also the founder of political advocacy group Demand Progress, faces a possible 35 years in prison and fines up to US$1 million.
Between September and January, Swartz allegedly contrived to break into a restricted computer wiring closet in an MIT basement and access MIT's network from a computer switch there, the DOJ said in a press release. Swartz, a fellow at Harvard University's Center for Ethics, targeted documents provided to MIT by Journal Storage (JSTOR), a nonprofit archive of scientific journals and academic work, the DOJ alleged.
Swartz accessed the MIT network through the university's free guest network service, the indictment said. When MIT and JSTOR attempted to block access from Swartz's laptop, he changed the IP address and spoofed the computer's MAC address to get continued access, the indictment says. He registered for network access using a throwaway e-mail address, the DOJ said.
In October, Swartz connected a second laptop to the network, according to the indictment. On Oct. 9, the two laptops downloaded so many documents from JSTOR that some of the organization's servers crashed, the indictment said.
Swartz, through Harvard, had access to JSTOR articles, the DOJ said. JSTOR restricts some downloads and gives users access only for their personal use, the DOJ said.
JSTOR has archived and digitized more than 1,000 academic journals, the DOJ said. Swartz intended to distribute the documents he stole on file-sharing networks, the indictment alleged.
"Stealing is stealing whether you use a computer command or a crowbar, and whether you take documents, data or dollars," Carmen Ortiz, U.S. attorney for the District of Massachusetts, said in a statement. "It is equally harmful to the victim whether you sell what you have stolen or give it away."
Demand Progress, founded late last year to campaign for digital rights, questioned the arrest. "As best as we can tell, he is being charged with allegedly downloading too many scholarly journal articles from the Web," the group said on its blog. "The government contends that downloading said articles is actually felony computer hacking and should be punished with time in prison."
JSTOR has settled its claims against Swartz, said David Segal, Demand Progress' executive director.
"This makes no sense," Segal said in a statement. "It's like trying to put someone in jail for allegedly checking too many books out of the library."
"It's even more strange because JSTOR has settled any claims against Aaron, explained they've suffered no loss or damage, and asked the government not to prosecute," Segal added.
JSTOR declined to comment on the charges, but said the downloads were "unauthorized."
The DOJ is not aware that any personal identifying information was stolen from JSTOR, the DOJ said.
Swartz wrote the Wikipedia analysis, "Who Writes Wikipedia?" He also coauthored the RSS 1.0 specification and has served on the board of Change Congress, a government reform group, according to his website.
Grant Gross covers technology and telecom policy in the U.S. government for The IDG News Service. Follow Grant on Twitter at GrantGross. Grant's e-mail address is grant_gross@idg.com.
Join the CIO Australia group on LinkedIn. The group is open to CIOs, IT Directors, COOs, CTOs and senior IT managers.