The United States District Court for the Eastern District of Virginia (the Fourth Circuit) granted the FBI's request and issued the disclosure order against Lavabit that same day. A one-page, single-spaced attachment to the order listed the categories of information to be disclosed, including names, addresses, phone records, other subscriber identities, billing records, activity records, and "information about each communication" -- in other words, everything about the email account "not including the contents of communications." The order did not mention encryption keys, SSL keys, or the like. These are closely guarded secrets in a security business like Lavabit.
The U.S. Magistrate Judge who signed the initial order gave Lavabit 10 days to comply. He also sealed the court records from public view and further ordered that Lavabit "shall not disclose the existence of the application of the United States, or the existence of this order" to anyone except "an attorney for Lavabit." In other words, Levison was subject to a gag order before he ever found out the FBI was definitely coming after him.
In the meantime, on June 14, the Justice Dept. filed a sealed criminal complaint against Snowden, who was then in Hong Kong. The government accused him of three offenses -- theft of government property and two forms of "unauthorized communication" the Espionage Act of 1917. The criminal complaint, which was made public a week later, gave the government 60 days to file a formal indictment.
Getting unsatisfying compliance, the FBI decided to raise the stakes
According to a later Justice Dept. filing: "Mr. Levison received that order on June 11, 2013. Mr. Levison responded by mail, which was not received by the government until June 27, 2013. Mr. Levison provided very little of the information sought"." [emphasis added]
On June 28, the day after getting Levison's belated response to the June 10 order, the Justice Dept. went back to the Fourth Circuit Court in Alexandria seeking an order "authorizing the installation and use of a pen register/trap device on an electronic mail account" -- an FBI wiretap on email. Levison had no notice of the government motion and no opportunity to contest it. A new judge on the case, Magistrate Judge Theresa Buchanan, promptly ordered the wiretap installed on the basis that the government "has certified that the information likely to be obtained by such installation and use is relevant to an ongoing criminal investigation"." Like the first order, this order did not mention encryption keys, SSL keys, or the like.
FBI special agents met with Levison in Dallas the same day to discuss the new order, which Levison had not yet received, as well as a prior summons to appear before a grand jury. The agents presumably explained to Levison that the court had issued a secret order based on a secret motion, itself based on secret evidence (or none at all) and that Levison was not only compelled to comply but was also still under court order to keep the whole secret process a secret, this time with no exception even for his attorney.
According to a later government filing, "Mr. Levison told the agents that he would not comply with the pen register order and wanted to speak to an attorney. It was unclear whether Mr. Levison would not comply with the order because it was technically not feasible or difficult or was not consistent with his business practice of providing secure, encrypted email service for his customers."
As Levison months later explained to reporters about Lavabit: "We're wholly focused on secure email. Without it, we have no business." In Levison's view, breaking Lavabit's security without the right to tell his customers would have been to commit commercial fraud.
Judge Buchanan keeps the pressure on Levison and Lavabit
Following this meeting, the Justice Dept. immediately went before Judge Buchanan seeking an order to compel Lavabit to comply with the other Magistrate's earlier order and install the FBI wiretap and to "furnish agents from the Federal Bureau of Investigation, forthwith, all information, facilities, and technical assistance necessary to accomplish the installation and use of the pen/trap device-- as ordered pursuant to federal law [U.S. Code, Title 18, sec. 3123].
Judge Buchanan immediately granted the "Order Compelling Compliance Forthwith," based in part on her findings that "Lavabit informed the Federral Bureau of Investigation that the user of the account had enabled Lavabit's encryption services and thus the pen/trap device would not collect the relevant information" and that "Lavabit informed the FBI that it had the technological capability to obtain the information but did not want to "defeat [its] own system'""
Judge Buchanan ordered Lavabit to provide "unencrypted data pursuant to the Order." Noting that failure to comply "forthwith" would subject Lavabit to "any penalty within the power of the court," Judge Buchanan added in her own handwriting, "including the possibility of criminal contempt of court." This order was issued under seal.
Previously, Levison faced the possibility of being fined for civil contempt if he failed to comply. Now he also faced going to jail. And the court's most recent orders, in their plain language, prevented Levison from discussing his situation with anyone, not even an attorney.
According to the FBI, agents "made numerous attempts, without success, to speak and meet directly with Mr. Levison" during the next ten days. On July 9, the Justice Dept. returned to the Fourth Circuit court seeking an order for Lavabit to show cause why it "has failed to comply with the orders entered June 29" by Magistrate Buchanan, and why Lavabit should not be held in contempt of court for its failure to comply.
Next Page 1 | 2 | 3 | 4 | 5 | 6 | 7
(Note: You can view every article as one long page if you sign up as an Advocate Member, or higher).
2
2
1
