UK Anti-Piracy Firm E-mails Reveal Cavalier Attitude Toward Legal Threats

Khyber writes "A recent DDoS attack against a UK-based anti-pirating firm, ACS:Law, has resulted in a large backup archive of the server contents being made available for download, [and this archive] is now being hosted by the Pirate Bay. Within this archive are e-mails from Andrew Crossley basically admitting that he is running a scam job, sending out thousands of frivolous legal threats on the premise that a percentage pay up immediately to avoid legal hassles."

Comments

The DOS did cause leak.

[Anonymous Coward]

It was a chain of events, which was triggered by the DOS. According to what I read, in the process of countering the DOS, the default home page was briefly moved. This exposed a listing of the root directory, which happened to contain a backup image, which was rapidly grabbed by the DOSers.

Re:has resulted?

[Anonymous Coward]

The DDoS brought their servers down. They went down in flames so ACS:Law had to reinstall everything and their idiot admin exposed their entire website (mostly tons of confidential information) to the public. I downloaded it myself, the file is called backup-8.24.2010_12-58-28_acslawor and the shit I found in it was very scarry. If it wasn't for the DDoS, we wouldn't have gotten our hands on this file. Go die somewhere and stop posting shit you don't know anything about.

Re:Wow.

[timeOday]

Is what surprising? After reading the linked articles, they don't support the blurb, particularly the claim Crossley is "admitting that he is running a scam job, sending out thousands of frivolous legal threats on the premise that a percentage pay up immediately to avoid legal hassles." He does come across as something of a jerk, but then, a lot of people probably say things about ex-wives.

Re:Wow.

[tomhudson]

No, actually, making false accusations in the hope of obtaining money is extortion. While the threat of legal action is specifically exempt, the threat of public embarrassment (accusing old people of downloading a gay porn video called "Army Fuckers") is not.

Also, given that they claim to have "forensic computer evidence" when they do not (sorry, a date and time from a server log, without the hard disk in the server being removed to preserve the "evidence", and a proper chain of custody, is not "forensic evidence").

This is why BritGov is investigating them.

Re:As many suspected.

[Any Web Loco]

http://www.cps.gov.uk/legal/a_to_c/abuse_of_process/

Re:...deliberately does not target TalkTalk or Vir

[drunkenoafoffofb3ta]

No, you're being confused by the Virgin name. Virgin Media (the broadband provider) was sold to NTL. Although Branson owns shares in the company, it's not the same company as the record label -- indeed Virgin Media pay Branson a yearly fee just to use the Virgin brand. Further, the Virgin record label was sold off to EMI years ago.

Re:Not just piracy...

[MichaelSmith]

Its been a scam for longer than the internet has been around.

Re:Wow. - Extortion vs Coercion

[commodore64_love]

Perhaps there's a difference legally, but I don't see any difference for the common man.

"Pay us $5000 or else be prosecuted," is extortion in my mind, especially since it involves money. The law firms are acting like members of The Family. "Pay us money or else we'll rough you up."

Re:Wow. - Extortion vs Coercion

[tomhudson]

Legally, any attempt to get someone to do something by means of threats, etc except the threat of legal action is extortion. That's why you can threaten to sue someone, and it's not extortion. However, the way these were done crossed over the line, in that they also included false claims of having "forensic evidence", as well as the implied threat of public humiliation for being accused of downloading gay porn, and for asking for an arbitrary amount, rather than saying "these are the damages we've suffered." That last one is a killer - you cannot just ask for money - it has to be in relation to damages.

Stores had a policy of catching teen-age shoplifters, then sending their parents a demand letter saying they wanted $300 for some nebulous "costs". The judges rightfully threw it out. When someone does you harm, you're entitled to be compensated. You may even be entitled to exemplary damages. However, unless there's an amount that is set by statute (which is why they're known as "statutory damages"), you can't just "pull a number out of the air."

Trying to get what you, as a lawyer, should know the law does not allow, is extortion because your threat of legal action is being used to commit a crime. You no longer enjoy the "except threat of legal action" exemption.

Correct legal terminology

[Roger W Moore]

I'd probably send a "fuck off" reply

Please, if you are replying to a legal letter the correct response is "I refer you to the reply given in the case of Arkell v. Pressdram".

Re:Privacy, there must be a law?

[MattBD]

Sued - probably not. But they might well be at risk of prosecution. This is covered by the Data Protection Act 1998, one of the principles of which states that appropriate technical and training measures need to be taken against granting unauthorised access to data. If they are in breach of this they could well be prosecuted by the Information Commissioner's Office. DPA also requires that the data subject has consented to the processing, which makes me wonder whether by passing user data on to ACS:Law without a court order, ISP's are breaching the Data Protection Act.

Re:Wow. - Extortion vs Coercion

[Mashiki]

Well let me point this out from Canada. In Canada coercion is illegal(unless it falls under a very limited set of exclusionary rules), and extortion is illegal. Don't do it, don't do it at all here. We will come down on you hard.