The U.S. Department of Justice has expanded its investigation of WikiLeaks-related accounts to encompass Google and Internet provider Sonic.net.
Both companies received secret court orders directing them to turn over information from the e-mail account of Jacob Appelbaum, a hacker and human rights activist who has been affiliated with WikiLeaks, The Wall Street Journal reported today.
CNET has learned that the secret court order is what's called a 2703(d) order. It's not as privacy-protective as a traditional search warrant, and some courts have ruled that such orders are unconstitutional when used to read a suspect's e-mail. Appelbaum has not been charged with a crime.
"We don't talk about individual cases to help protect all our users," Christine Chen, a Google representative, told CNET. "Obviously, we follow the law like any other company. When we receive a subpoena or court order, we check to see if it meets both the letter and the spirit of the law before complying. And if it doesn't, we can object or ask that the request is narrowed."
Sonic.net CEO Dane Jasper told CNET that "we did manage to unseal the specific order in order to provide it to Appelbaum." Jasper said, however, that he could not provide additional details "as the case remains under seal." (Sonic.net is an Internet service provider in Santa Rosa, Calif., an hour or so north of San Francisco, which offers home and business connectivity.)
Federal prosecutors also have used 2703(d) orders, which are named after the corresponding section of federal law, to try to obtain WikiLeaks-related information from Twitter. The order asked for "subscriber account information" for Appelbaum, Dutch hacker and XS4ALL Internet provider co-founder Rop Gonggrijp, WikiLeaks editor Julian Assange, and Birgitta Jónsdóttir, a member of Iceland's national parliament.
In March, a federal magistrate judge in Virginia dismissed constitutional questions and sided with the Justice Department when granting prosecutors access to WikiLeaks-related Twitter accounts, including details about what Internet and e-mail addresses are associated with them. An appeal has been filed.
Ever since appearing at The Next HOPE hacker conference in July 2010 on behalf of WikiLeaks' Assange, who's currently out on bail in England while fighting extradition charges, Appelbaum has been the subject of strict police scrutiny. The Tor Project programmer has been repeatedly targeted when he crosses the border, with his electronics seized, and he no longer travels with any sensitive data. Even his friends have had their laptops and cell phones temporarily seized.
The Justice Department's probe of WikiLeaks involves a grand jury in Alexandria, Va. It's unclear what charges may eventually be filed, and who would be targeted, but a lawyer for Assange said last year that he believes his client could be indicted under the Espionage Act for publishing over 250,000 classified State Department cables. (See CNET's analysis of how the Espionage Act might, or might not, apply.)
In this case, it appears that the Justice Department is not asking for the contents of Appelbaum's communications--instead, they want to know the identities of his correspondents, which can be even more useful. According to the Journal:
Sonic.net said in a blog post in August that it retains logs of which customer was assigned which Internet Protocol address "for just two weeks; we don't need them beyond that period, so they are deleted." That's more privacy-protective than the industry norm.