Department of Justice indicts three Russians, including two intelligence agency employees, and a Canadian in connection with 2014 Yahoo breach
DOJ The Guardian : Justice department charges Russian spies and hackers over Yahoo breach - video Marissa's Tumblr : Russian Hackers and Government Officers Indicted in Connection With Yahoo Security Incidents Mudit Mohilay / The Tech Portal : US Department of Justice accuses Russian spies and criminals behind Yahoo hack Chris Smith / BGR : DOJ has charged Russian spies allegedly responsible for massive Yahoo breach Jonathan Keane / Digital Trends : U.S. will charge two Russian spies and two hackers in 2014 Yahoo breach Shawn Knight / TechSpot : Justice Department indicts four in connection with 2014 Yahoo hack (including two Russian security officers) Joseph Cox / Motherboard : US Indicts Russian Intelligence Agents and Hackers for Yahoo Breach Madison Malone Kircher / New York Magazine : DOJ Charges Russian Spies for Hacking 500 Million Yahoo Accounts Mihăiă Bamburic / BetaNews : US indicts Russian spies and hackers over 2014 Yahoo hack Tiernan Ray / Tech Trader Daily : Yahoo! and Twitter in Focus on Security Breach Wednesday April Glaser / Recode : Russian spies are behind the Yahoo data breach, says the DOJ William Turton / Gizmodo : Here's How Russian Hackers Totally Owned Yahoo's Servers to Spy on Enemies and Make Bank Brian Womack / Bloomberg : Source: Department of Justice to indict four people, one in Canada and three in Russia, in connection with 2013 Yahoo data breach DataBreaches.net : Justice Department charging Russian spies and criminal hackers in Yahoo intrusion Marcus Gilmer / Mashable : Russian spies blamed for massive Yahoo! hack Jon Fingas / Engadget : Russian spies indicted in massive Yahoo account breach Jenn Gidman / Newser : 2 Russian Spies, 2 Hackers Behind Yahoo Hack: Reports Eric Lieberman / The Daily Caller : DOJ Reportedly Set To Charge Russian, Canadian Hackers For Yahoo Breach Tweets: Russell Brandom / @russellbrandom : According to indictment, one hired hacker manipulated Yahoo search results for erectile dysfunction drugs. http://www.justice.gov/... Stacy Herbert / @stacyherbert : One of the two named FSB agents was arrested in January in Moscow on treason charges . . . http://www.cbsnews.com/... http://twitter.com/... Jeremiah Grossman / @jeremiahg : Apparently only 1 of the 4 alleged Yahoo hackers was arrested. The other 3 are in Russia. Unclear if they'll be turned over to the USGOV.pic.twitter.com/3HzQPYBo2Z Russell Brandom / @russellbrandom : Very few security folks believed Yahoo that “a state-sponsored actor” was behind the breach. More plausible now! http://www.theverge.com/... Pierre Omidyar / @pierre : Two FSB agents named and charged. When is the last time FSB agents were directly charged with anything? https://www.nytimes.com/... Sam Greene / @samagreene : Per the indictment, the hackers were mostly interested in prominent Russian figures & “a country bordering Russia” http://www.justice.gov/...
Context & Ripple Effects
This indictment is the opening move in what becomes the DOJ's signature tactic of the decade: prosecuting foreign intelligence officers as common criminals rather than protesting through diplomatic channels. Two FSB employees are charged alongside hackers for the 2014 Yahoo compromise — the first time US prosecutors have named serving Russian intelligence personnel in a commercial data breach case.
The template holds. A year later, Mueller's probe produces an indictment of thirteen Russian nationals and the Internet Research Agency over 2016 election interference; by 2020 the same playbook targets China, with charges against four intelligence officers for the Equifax hack; and in late 2021 five Russians are indicted for hacking SEC Filing Agents to trade on stolen filings.
First-order effects
- Two Russian intelligence agency employees and a Russian-Canadian hacker now face US criminal charges for the Yahoo breach, exposing named FSB personnel to arrest if they travel beyond Russia and putting the agency on record as directing commercial hacking.
Second-order effects
- Yahoo's breach liability and its pending sale process take on a new dimension once the intrusion is attributed to state-directed actors, and rival platforms face pressure to attribute their own historical breaches rather than absorb them quietly.
Third-order effects
- If the pattern holds through the Equifax and SEC-filing-agents cases, cyber-espionage shifts from an intelligence matter handled privately to an indictment-driven public attribution contest, with each DOJ action forcing reciprocal exposure of the other side's operations.
The trend: US law enforcement is replacing quiet diplomatic protest with criminal indictments of named foreign intelligence officers, turning state-sponsored hacking into a public attribution battlefield.