Swiss spy agency warns U.S., Britain about huge data leak

ZURICH Tue Dec 4, 2012 6:12pm IST

Related Topics

Rajalakshmi (C), 28, smiles after winning the Miss Wheelchair India beauty pageant in Mumbai November 26, 2014. REUTERS/Danish Siddiqui

Miss Wheelchair India

Seven women from across India participated in the country's second wheelchair beauty pageant, which aims to open doors for the wheelchair-bound in modelling, film and television, according to organisers  Slideshow 

ZURICH (Reuters) - Secret information on counter-terrorism shared by foreign governments may have been compromised by a massive data theft by a senior IT technician for the NDB, Switzerland's intelligence service, European national security sources said.

Intelligence agencies in the United States and Britain are among those who were warned by Swiss authorities that their data could have been put in jeopardy, said one of the sources, who asked for anonymity when discussing sensitive information.

Swiss authorities arrested the technician suspected in the data theft last summer amid signs he was acting suspiciously. He later was released from prison while a criminal investigation by the office of Switzerland's Federal Attorney General continues, according to two sources familiar with the case.

The suspect's name was not made public. Swiss authorities believe he intended to sell the stolen data to foreign officials or commercial buyers.

A European security source said investigators now believe the suspect became disgruntled because he felt he was being ignored and his advice on operating the data systems was not being taken seriously.

Swiss news reports and the sources close to the investigation said that investigators believe the technician downloaded terrabytes, running into hundreds of thousands or even millions of printed pages, of classified material from the Swiss intelligence service's servers onto portable hard drives. He then carried them out of government buildings in a backpack.

One of the sources familiar with the investigation said that intelligence services like the U.S. Central Intelligence Agency and Britain's Secret Intelligence Service, also known as MI6, routinely shared data on counter-terrorism and other issues with the NDB. Swiss authorities informed U.S. and British agencies that such data could have been compromised, the source said.

News of the theft of intelligence data surfaced with Switzerland's reputation for secrecy and discretion in government and financial affairs already under assault.

Swiss authorities have been investigating, and in some cases have charged, whistleblowers and some European government officials for using criminal methods to acquire confidential financial data about suspected tax evaders from Switzerland's traditionally secretive banks.

The suspect in the spy data theft worked for the NDB, or Federal Intelligence Service, which is part of Switzerland's Defense Ministry, for about eight years.

He was described by a source close to the investigation as a "very talented" technician and senior enough to have "administrator rights," giving him unrestricted access to most or all of the NDB's networks, including those holding vast caches of secret data.

Swiss investigators seized portable storage devices containing the stolen data after they arrested the suspect, according to the sources. At this point, they said, Swiss authorities believe that the suspect was arrested and the stolen data was impounded before he had an opportunity to sell it.

However, one source said that Swiss investigators could not be positive the suspect did not sell or pass on any of the information before his arrest, which is why Swiss authorities felt obliged to notify foreign intelligence partners their information may have been compromised.

Representatives of U.S. and British intelligence agencies had no immediate response to detailed queries about the case submitted by Reuters, although one U.S. official said he was unaware of the case.

SECURITY PROCEDURES QUESTIONED

Swiss Attorney General Michael Lauber and a senior prosecutor, Carolo Bulletti, announced in September that they were investigating the data theft and its alleged perpetrator. A spokeswoman for the attorney general said she was prohibited by law from disclosing the suspect's identity.

A spokesman for the NDB said he could not comment on the investigation.

At their September press conference, Swiss officials indicated that they believed the suspect intended to sell the data he stole to foreign countries. They did not talk about the possible compromise of information shared with the NDB by U.S. and British intelligence.

A European source familiar with the case said it raised serious questions about security procedures and structures at the NDB, a relatively new agency which combined the functions of predecessor agencies that separately conducted foreign and domestic intelligence activities for the Swiss government.

The source said that under the NDB's present structure, its human resources staff - responsible for, among other things, ensuring the reliability and trustworthiness of the agency's personnel - is lumped together organisationally with the agency's information technology division. This potentially made it difficult or confusing for the subdivision's personnel to investigate themselves, the source said.

According to the source, investigators now believe that in the months before his arrest, the data theft suspect displayed warning signs that should have been spotted by his bosses or by security officials.

The source said that the suspect became so disgruntled earlier this year that he stopped showing up for work.

However, according to Swiss news reports, the NDB did not realise that something was amiss until the largest Swiss bank, UBS, expressed concern to authorities about a potentially suspicious attempt to set up a new numbered bank account, which then was traced to the NDB technician.

A Swiss parliamentary committee is now conducting its own investigation into the data theft and is expected to report next spring. Investigators are known to be concerned that the NDB lacks investigative powers, such as to search premises or conduct wiretaps, which are widely used by counter-intelligence investigators in other countries. (Reporting by Mark Hosenball; Editing by Mark Heinrich)

FILED UNDER:

SAARC Summit

REUTERS SHOWCASE

Ferguson Riots

Ferguson Riots

More than 400 arrested as Ferguson protests spread to other U.S. cities   Full Article 

Taiwan Election

Taiwan Election

Taiwan vote tests waters for pro-China govt ahead of presidential polls  Full Article 

Rakhine Plight

Rakhine Plight

Exclusive - Poor and besieged, Myanmar's Rakhine join Rohingya exodus  Full Article 

Ebola Outbreak

Ebola Outbreak

Ebola vaccine from Glaxo passes early safety test  Full Article 

Korea Ferry Crew

Korea Ferry Crew

Stigma and isolation haunt S.Korean families of convicted ferry crew  Full Article 

Thanksgiving Pardon

Thanksgiving Pardon

Cheese bests Mac in quest for Obama's Thanksgiving turkey pardon  Full Article 

Hong Kong Protest

Hong Kong Protest

Hong Kong riot police clear protest site, arrest student leaders  Full Article 

Reuters India Mobile

Reuters India Mobile

Get the latest news on the go. Visit Reuters India on your mobile device  Full Coverage