I think I need the FBI on this one. . .

[pnlmig]

Hello, I have not seen this kind of request before, but a former consultant has defaced a number of our customer's sites. We have trackable information and know it was done by him. Who do I take this to?
We're dealing with 10-15K in losses. To make matters worse, the individual resides in Canada, we're in California.

ANY idea?

[blue27]

You might find some useful information here.
http://www.ccmostwanted.com/report/report2.htm

[gvsales]

if you know that it was ex worker, contact legal autorities.

[MattG.]

I would first contact your lawyer before making any calls.

[usawebhosting]

if you know that it was ex worker, contact legal autorities.

i agree on this one for sure.

[FiberLightning]

If you have correct information (name, address, etc.) contact a lawyer right away. Last I heard canada will cooperate in most cases with us agencies.

[ACENET-Jason]

I agree that your lawyer would be the best first step.

[demowolf]

Hello, I have not seen this kind of request before, but a former consultant has defaced a number of our customer's sites. We have trackable information and know it was done by him. Who do I take this to?
We're dealing with 10-15K in losses. To make matters worse, the individual resides in Canada, we're in California.

ANY idea?
Have you contacted your lawyer? How did it go?

[richardvan1]

we have had similer problems

[danserv]

You could try emailing your datacentre, a lot of them have abuse contacts direct to cops, that could advise you in the best way (also without any expensive lawyer costs) :)

[AMHASH]

Contact your lawyer first and then the police

[ITHost-Korey]

I used to work for a computer security consulting firm.

http://www.thornassoc.com

They dealt with arranging evidence and preparing it for court, as well as consulting. Operations in southern california, and Ontario Canada.

[clementsweb]

Don't make a move without a lawyer. We tried once, with no hope at all. These guys (lawyers) are the best at what they do

[frosman]

I had a similar problem in Europe.
It was impossible to do anything, but the only visit of Interpol made them to move away.
However, we didnīt recover one euro.

[&scott]

Uhh yeah sorry to being up an old topic but I had to say...

You don't contact the police in something like this - they can't do anything. Do you think calling 911 will solve 10-15 thousand dollars worth of internet/intangable damage? How many police officers do you know that have a complete knowledge of the interworkings of a server? The people who said "call the police" are very ignorant and have no idea what they are talking about.

This is not the type of things police handle. I would suggest contacting an attorney. He/she will guide you from there.

[HV | Tracy]

&Scot is correct.

Contact your a lawyer. They will file the charges.

[HostsForTheCause]

Canadiens...:p:

[ryan1918]

Oh have I seen this many times and been through a lot of these things, but the FBI or any government official will do nothing, they only investigate a case if it's in the tens of thousands of dollars in damages as it costs them thousands upon thousands of dollars to investigate these types of things, but in a way it's your fault for not securing your server or protecting yourself from something that happens every minute, there is a defacement every minute of the day and about 90% of the time you have to live and learn, check logs and better protect yourself, and your server from anything in the future from happening, I am a security expert and you will get no where unless you do what I say.

[ryan1918]

Oh and the fact is there out of jurisdictions you are going to have a hard time doing anything, and I wouldn't even bother with anything because your going to waste more money in trying to do anything to them then you are going to get out of it, so do what I tell everyone, "Live and learn".

[hosting-squared]

I would first contact your lawyer before making any calls.

i agree completly

[HostersDream]

Sounds like a big loss. What exactly happened though.

[miniplaya]

contact a lawyer that knows abut online items.

[ShawNetworks]

That sounds like a hairy situation, I wish you the best of luck in bringing the hacker to justice.

[ShawNetworks]

Canadiens...:p:

Haha, blame Canada ;)

[drwho200]

Yes agreed, contact a Lawyer and take their advice. It will be the best.

[Calinax]

Contacting Lawyers wont help. Hire server admins, and secure up your servers.

You cant call up FBI for such cases..though if you've been scammed or such, you may contact local police.

[Confess]

Wow. That seems horrible - Yes, I'd say contact the authories, contact your lawyer, and contact the FBI. Make sure you keep a complete log of everything that happened, and put it into a nice document with all proof.

[ewebspacenet]

Agreed 100% with &scott.

[danushman]

Hello, I have not seen this kind of request before, but a former consultant has defaced a number of our customer's sites. We have trackable information and know it was done by him. Who do I take this to?
We're dealing with 10-15K in losses. To make matters worse, the individual resides in Canada, we're in California.

ANY idea?


Since they are based in Canada I would first give them the benefit of the doubt... Their computer may have been hacked and forced to act as an open proxy for the real hacker who can be anywhere in the world. Second, I would contact an attorney in Canada and ask them to start looking into it. You may even be able to directly contact the local police in their area.

Canada, UK, the US, and most other first-world countries have strict laws against hacking and computer crimes.

[onlinesolutions]

what was the outcome?

[ServerDaemon]

Sorry but I think all these people who are saying dont bother doing anything or the police/govt officials wont do anything are talking rubbish. I would call 10-15k worth of loss serious and if you have the guys correct details then you could sue him for a substantial ammount of damages which is where your lawyer comes in. Also what he did was ILLEGAL and people who do this sort of thing can and have been put in jail.

He was very stupid doing that if he knew you had his contact information and as for those of you saying dont bother doing anything how would you feel if someone defaced your clients sites costing you 10-15k? you wouldn't be happy would you and would probably want the police/FBI to do something yourself.

[DuplexCore]

In our early days of business we hired a guy from a forum and he was good, we waited out 4 months before we trusted him with root access, we had a missunderstanding and he killed everything we had, To make matters worse he had the info to our backup systems and cleaned those too, Almost nothing was recoverable.

[ServerDaemon]

A sensible thing to do incase that happens again is get a secure secondary server for backups and not give ANYONE access

[SSANZ]

If you know who it is, then consult your local police station ASAP.

They can direct the feds onto you and then they start the investigation.

You may want to consider further protection against such an attack from an internal staff member.

[anthonyw17]

holy crap... yeah you needa report him for sure

[juanaballerina]

It's important to have livechat, but be aware many users will abuse it. d similar. Now imagine you have many clients like this person... Your workload will raise dramatically.

[juanaballerina]

You may want to consider further protection against such an attack from an internal staff member.
it's important to have livechat, but be aware many users will abuse it. d similar. Now imagine you have many clients like this person..__________________