Healthcare // Leadership
News
8/27/2014
06:06 PM
Connect Directly
RSS
E-Mail
50%
50%

Former Acting HHS Cybersecurity Chief Guilty Of Child Porn

Timothy DeFoggi faces 20 years to life after jury takes two hours to convict him in federal court.

 9 Technologies That Power New York City
9 Technologies That Power New York City
(Click image for larger view and slideshow.)

A Nebraska federal jury convicted a former acting director of cybersecurity at the Department of Health and Human Services of child pornography charges, the Justice Department announced on Tuesday.

Timothy DeFoggi, 56, could face 20 years to life when he receives his sentence on Nov. 7.

DeFoggi, who worked at HHS between 2008 until early 2014, was convicted of "engaging in a child exploitation enterprise, conspiracy to advertise and distribute child pornography, and accessing a computer with intent to view child pornography in connection with his membership in a child pornography website," the Justice Department said. The ex-HHS executive is the sixth person convicted in connection with this investigation into three child pornography sites, government officials said.

[Learn how to protect your online operations. Read Top 5 Reasons Your Small Business Website is Under Attack.]

DeFoggi, who registered as a member on the website in March 2012, maintained his membership and website activity until the FBI took the site down in December 2012, trial evidence showed. As part of that activity, DeFoggi "accessed child pornography, solicited child pornography from other members, and exchanged private messages with other members where he expressed an interest in the violent rape and murder of children. DeFoggi even suggested meeting one member in person to fulfill their mutual fantasies to violently rape and murder children," DOJ said.

He was one of at least 20 people using the site, the U.S. Attorney's Office of Nebraska told the Omaha World-Herald. At least 28,000 files were available to users of PedoBook; registered users shared more than 100,000 messages, the publication reported.

(Source: Omaha Police Department)
(Source: Omaha Police Department)

The pornography sites were run on servers that operated in Nebraska. Aaron McGrath, who has already been convicted for his role, managed the servers. McGrath pled guilty after being charged in a seven-count indictment in January. Unlike McGrath, DeFoggi took his chances with a jury; after a four-day trial and two hours of deliberation, the Omaha panel convicted him.

DeFoggi, of Germantown, Md., reportedly used Tor in a vain attempt to cover his tracks, Wired reported. The router masks users' IP addresses, generally hiding the originator's location. In this case, however, investigators remotely installed malware onto the devices of those who visited the child pornography sites, enabling law enforcement officials to identify those users' IP and MAC addresses, plus other identifiers, the site said. As a result, officials raided multiple, coordinated sites in April 2013 during "Operation Torpedo."

When agents arrived at DeFoggi's home, he reportedly was in the middle of downloading more child pornography, and agents had to force him away from his laptop, Wired wrote.

DeFoggi, who took the stand in his own defense, told the court he accessed Tor to seek out things that would damage national defense, World-Herald wrote. He sought hidden servers that could harm the government, he said.

The case was part of Project Safe Childhood, a nationwide initiative to combat child exploitation and pornography.

It is unclear where DeFoggi accessed the website, or whether he used any government-owned computers, tablets, or smartphones to conduct his criminal behavior. But in his roles as supervisory IT specialist at the Indian Health Service and as a lead IT specialist at the HHS Office of the Assistant Secretary of the Administration, he most likely knew whether the department had implemented the controls necessary to block abhorrent, illegal, or illicit behavior.

Join us at GTEC, Canada's government technology event. Over 6,000 participants attend GTEC -- Government Technology Exhibition And Conference each year to exchange ideas and advance the business of information and communications technology (ICT) in government. Don't miss thought-provoking keynotes, workshops, panels, seminars, and roundtable discussions on a comprehensive selection of ICT topics presented by leading public sector and industry experts. Register for GTEC with marketing code MPIWKGTEC and save $100 on entire event and conference passes or for a free expo pass. It happens Oct. 27 to 30 in Ottawa.

Alison Diana has written about technology and business for more than 20 years. She was editor, contributors, at Internet Evolution; editor-in-chief of 21st Century IT; and managing editor, sections, at CRN. She has also written for eWeek, Baseline Magazine, Redmond Channel ... View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
<<   <   Page 2 / 2
Alison_Diana
50%
50%
Alison_Diana,
User Rank: Author
8/28/2014 | 9:52:35 AM
Re: Cybersecurity Chief?
Exactly, @jgherbert. This was the most sickening story I've written in 24 years of covering tech. I don't know how investigators handle it, I really don't, other than knowing they are putting away the scum of the earth by their work. Thank goodness this slime's countermeasures were inadequate. Let's hope this, and other dedicated task forces around the world, continue to lock up these revolting creatures and throw away the keys.
jgherbert
50%
50%
jgherbert,
User Rank: Ninja
8/27/2014 | 9:51:07 PM
Cybersecurity Chief?
Well, you'd think given that job title, he'd know better. Not much else can be said about a story like this except, perhaps, good work to the authorities catching and prosecuting a few more of these people.
<<   <   Page 2 / 2
2014 US Salary Survey: 10 Stats
2014 US Salary Survey: 10 Stats
InformationWeek surveyed 11,662 IT pros across 30 industries about their pay, benefits, job satisfaction, outsourcing, and more. Some of the results will surprise you.
Register for InformationWeek Newsletters
White Papers
Current Issue
InformationWeek Tech Digest September 18, 2014
Enterprise social network success starts and ends with integration. Here's how to finally make collaboration click.
Flash Poll
Video
Slideshows
Twitter Feed
InformationWeek Radio
Archived InformationWeek Radio
The weekly wrap-up of the top stories from InformationWeek.com this week.
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.