Did Skype Give a Private Company Data on Teen WikiLeaks Supporter Without a Warrant?

The Citizen's Guide to the Future
Nov. 9 2012 4:30 PM

Did Skype Give a Private Company Data on Teen WikiLeaks Supporter Without a Warrant?

90257716
Skype faces accusations that it handed user data to a private company without a warrant

Photo Illustration by Mario Tama/Getty Images

Skype’s privacy credentials took a hit in July over a refusal to comment on whether it could eavesdrop on conversations. Now the Internet chat service is facing another privacy-related backlash—after allegedly handing over user data without a warrant to a private security firm investigating pro-WikiLeaks activists.

Ryan Gallagher Ryan Gallagher

Ryan Gallagher is a journalist who reports on surveillance, security, and civil liberties.

The explosive details were contained in a report by Dutch investigative journalist Brenno de Winter, published on NU.nl earlier this week. Citing an internal police file detailing an investigation called “Operation Talang,” Winter wrote that PayPal was attempting to track down activists affiliated with the hacker collective Anonymous. The hackers had attacked the PayPal website following the company’s controversial decision to block payments to WikiLeaks in December 2010.

Advertisement

As part of that investigation, PayPal apparently hired the private security company iSight to help find those responsible. Headquartered in Texas and with a European base in Amsterdam, iSight describes itself as a “global cyber intelligence firm” that “supports leading federal and commercial entities with targeted and unique insights necessary to manage cyber risks.” iSight’s Netherlands-based director of global research, Joep Gommers, followed an online trail in an effort to track down the hackers, ultimately leading to a number of Dutch citizens, among them a 16-year-old boy operating under a pseudonym. Gommers reportedly contacted Skype, also a client of iSight, and requested account data about the teenager. According to Winter’s report, “the police file notes that Skype handed over the suspect's personal information, such as his user name, real name, e-mail addresses and the home address used for payment.” It adds that Skype disclosed the information voluntarily, “without a court order, as would usually be required.”

The allegation is a serious one for Skype, not least because its own privacy policy promises that it will not hand over user data without permission “unless it is obliged to do so under applicable laws or by order of the competent authorities.” The policy further states that the information will only be provided to “an appropriate judicial, law enforcement or government authority lawfully requesting such information.” As a private company, iSight fails to meet these criteria by a considerable distance.

Skype has issued a statement on the matter, saying that it “takes its customers' privacy very seriously” and is undertaking an internal investigation. A spokesperson told me that Skype was working with the private security firm to “combat spam and malware,” and admitted that “it appears that some information may have been inappropriately passed on to Dutch authorities without our knowledge.” The spokesman added that Skype has taken “necessary steps” to ensure this doesn’t happen again, though declined to elaborate on what those necessary steps were.

The key question will now be whether this was an isolated violation or whether other Skype users’ data has been handed over to private investigators in separate cases. I emailed Gommers to ask whether there had been other instances where he had been provided information from Skype in the course of his work for iSight, and also contacted PayPal for comment. But neither had responded at the time of publication.

Earlier this year, I reported that Skype, which was purchased by Microsoft for $8.5 billion in May 2011, had evaded a question on its ability to eavesdrop on calls. The question was prompted by concerns about changes made to its architecture and a patent gained by Microsoft for “legal intercept” technology designed to be used with VOIP services like Skype to “silently copy communication transmitted via the communication session.” After the story was followed up elsewhere, Skype issued a statement that the architecture changes were not made to facilitate wiretapping—but failed to address the concerns around the patent. In a blog post written at the time, security researcher Christopher Soghoian said the extent to which governments can intercept the contents of Skype voice calls remained unclear, concluding that “until it is more transparent, Skype should be assumed to be insecure.” The latest allegations in the Netherlands will likely only add to that sense of mistrust.

Future Tense is a partnership of SlateNew America, and Arizona State University.

TODAY IN SLATE

Foreigners

More Than Scottish Pride

Scotland’s referendum isn’t about nationalism. It’s about a system that failed, and a new generation looking to take a chance on itself. 

Yes, Black Families Tend to Spank More. That Doesn’t Mean It’s Good for Black Kids.

Why Greenland’s “Dark Snow” Should Worry You

If You’re Outraged by the NFL, Follow This Satirical Blowhard on Twitter

The Best Way to Organize Your Fridge

Politics

The GOP’s Focus on Fake Problems

Why candidates like Scott Walker are building campaigns on drug tests for the poor and voter ID laws.

Sports Nut

Giving Up on Goodell

How the NFL lost the trust of its most loyal reporters.

Is It Worth Paying Full Price for the iPhone 6 to Keep Your Unlimited Data Plan? We Crunch the Numbers.

Farewell! Emily Bazelon on What She Will Miss About Slate.

  News & Politics
Politics
Sept. 16 2014 6:30 PM Nothing Succeeds Like Secession Breakaway movements across the United States want to get on the Scottish bandwagon. 
  Business
Moneybox
Sept. 16 2014 2:35 PM Germany’s Nationwide Ban on Uber Lasted All of Two Weeks
  Life
The Eye
Sept. 16 2014 12:20 PM These Outdoor Cat Shelters Have More Style Than the Average Home
  Double X
The XX Factor
Sept. 15 2014 3:31 PM My Year As an Abortion Doula
  Slate Plus
Tv Club
Sept. 15 2014 11:38 AM The Slate Doctor Who Podcast: Episode 4  A spoiler-filled discussion of "Listen."
  Arts
Brow Beat
Sept. 16 2014 6:23 PM Bryan Cranston Reenacts Baseball’s Best Moments to Promote the Upcoming Postseason
  Technology
Future Tense
Sept. 16 2014 1:48 PM Why We Need a Federal Robotics Commission
  Health & Science
Science
Sept. 16 2014 4:09 PM It’s All Connected What links creativity, conspiracy theories, and delusions? A phenomenon called apophenia.
  Sports
Sports Nut
Sept. 15 2014 8:41 PM You’re Cut, Adrian Peterson Why fantasy football owners should release the Minnesota Vikings star.