Chapter 47, Section 1030 of the U.S. Code is one of the federal government's main tools to combat the thugs of the electronic underworld. It prohibits unauthorized access to computer networks to steal information, interfere with government operations or damage vital systems. Those prohibitions are broadly written, and for good reason: "Black hat" hackers are an innovative bunch, continually finding new ways to pilfer identities, zombify computers and shake down Web-based businesses. But prodded by U.S. Atty. Thomas P. O'Brien, a federal jury in Los Angeles applied Section 1030 in an alarming way last week, using it to convict a Missouri woman for what amounted to a routine violation of a popular website's terms of service. Now it's up to U.S. District Judge George H. Wu to override the jury's decision and clarify that fibbing on an online form isn't a federal crime.
The target of O'Brien's legal maneuverings was a woman named Lori Drew from a small town west of St. Louis. She was, to put it charitably, an unsympathetic defendant. Ostensibly trying to protect her daughter from rumor-mongering, Drew joined the 13-year-old and two other teenage girls in perpetrating a cruel hoax on a young neighbor, Megan Meier. One of the girls created a MySpace profile for a fictitious 16-year-old boy, and the group used it to flirt with Megan before suddenly turning on her. Apparently overwhelmed, Megan committed suicide shortly before her 14th birthday.
There's a cruel streak to adolescence, and cyber-bullying is the latest form of it. It's particularly pernicious, given the combination of intimacy and deception that the Internet enables. But there's no federal statute against cyber-bullying, and, like most states, Missouri had no law against it when the Meier incident occurred. Prosecutors in St. Charles County, Mo., declined to prosecute Drew or the teens involved, saying there wasn't enough evidence to prove a violation of the state's laws against harassment.
That's when O'Brien -- whose jurisdiction includes Beverly Hills-based MySpace -- turned to Section 1030, arguing that Drew's use of the site amounted to unauthorized access because the company's terms of service prohibit fake names and abusive comments. Prosecutors also argued that Drew intended to harm Megan, because she had been warned that the girl was suicidal and being treated for depression. The jurors couldn't agree on the charge that Drew conspired to violate Section 1030, a felony that carries a prison term of up to 20 years. But they did find her guilty on three misdemeanor violations of that law. (No charges were brought against any of the girls, including Ashley Grills, then an 18-year-old employee of Drew, who set up the bogus MySpace account. Grills testified for the prosecution.)