Megaupload.com, a file-sharing website, was shut down as part of an alleged $175 million copyright infringement conspiracy, triggering an online protest that disrupted websites of the U.S. Justice Department and movie and music trade groups.
Charges against seven individuals, Megaupload Ltd. and Vestor Ltd. were unsealed yesterday in federal court in Alexandria, Virginia, after four of the alleged conspirators were arrested in Auckland, New Zealand. Three suspects remain at large, according to the Justice Department.
“This action is among the largest criminal copyright cases ever brought by the United States and directly targets the misuse of a public content storage and distribution site to commit and facilitate intellectual property crime,” the department said in an e-mailed statement.
The Megaupload indictment was made public as the U.S. Congress considers anti-piracy legislation supported by the movie and music industries that has prompted a backlash from companies including Google Inc., the nonprofit Wikimedia Foundation Inc. and Web consumers. Opponents say the Stop Online Piracy Act in the House and the Protect IP Act in the Senate would promote online censorship, disrupt the Web’s architecture and harm their ability to innovate.
About an hour after the indictments were unsealed, the public websites of the Justice Department, the Motion Picture Association of America and the Recording Industry Association of America would not load. The hacker-activist group known as Anonymous took credit for the disruptions, citing the Megaupload prosecutions, according to Twitter accounts used to publicize the group’s activities.
The sites were disabled by a so-called directed denial of service attack, which floods websites with so much traffic that they temporarily crash without harming network systems or giving attackers access to confidential information.
“These kinds of attacks take down a website so people can’t get there,” said E.J. Hilbert, a former cybersecurity expert for the FBI.
“That’s important if you’re a commercial site like Amazon.com. If you’ve got an information site like the Justice Department, it’s just a protest.”
“It’s like someone egging your car,” added Hilbert, who is now a managing director at Kroll Inc., the security firm. “You wash it off and get back to business.”
The Justice Department said in a statement that it’s “working to ensure the website is available while we investigate the origins of this activity.” The disruption is being treated as a “malicious act,” according to the statement.
The Motion Picture Association of America is “working with law enforcement authorities to identify those responsible,” according to a statement from the group.
Jonathan Lamy, a spokesman for the Recording Industry Association of America, declined to comment.
Investigators executed more than 20 search warrants in the U.S. and eight other countries and seized about $50 million in assets, the department said. Since September 2005, the conspiracy — dubbed “Mega Conspiracy” by prosecutors — generated more than $175 million in criminal proceeds by distributing millions of copies of copyrighted works, including movies, television programs, music, books, video games and computer software, according to the indictment.
Of that, more than $150 million came from premium subscriptions and $25 million from online advertising. A lifetime subscription cost about $260, according to the indictment.
The conspiracy deprived copyright owners of more than $500 million they were entitled to, the government said.
“This looks to be an overly aggressive prosecution,” Ira Rothken, a Novato, California, lawyer and outside litigation counsel to Megaupload, said in an interview.
“The indictment appears to be wrong on the facts and wrong on the law,” he said.
He said Megaupload’s website was shut with no notice from the government and no opportunity to challenge it in court. Megaupload Ltd., registered in Hong Kong, is the website’s owner of record, according to the indictment. The locales of its computer servers with the allegedly illegal content included Ashburn, Virginia, and Washington, according to the indictment.
Megaupload is advertised as having more than 1 billion visits to the site, more than 150 million registered users, 50 million daily visitors, and accounts for 4 percent of Internet traffic, prosecutors said.
Megaupload paid millions of dollars in incentives to subscribers to the site, who were rewarded for uploading content that others could then use, according to the indictment.
A survey released in December of 1,600 corporate customers of Palo Alto Networks Inc., a computer security company, found 57 percent of the companies had workers who spent some time trading film clips and games on Megaupload.
The indictment contains one count of racketeering, one count of conspiring to commit copyright infringement, one count of conspiring to commit money laundering and two counts of criminal copyright infringement.
The racketeering and money laundering charges carry maximum penalties of 20 years in prison while the copyright infringement charges have maximum five-year penalties.
Prosecutors said the conspiracy was led by Kim Dotcom [pictured], a 37-year-old resident of Hong Kong and New Zealand, and a dual citizen of Finland and Germany, who had legally changed his last name. Dotcom founded Megaupload Ltd. and is the director and sole shareholder of Vestor Ltd., according to the indictment.
In 2010, Dotcom received more than $42 million from the conspiracy, the indictment alleges. Dotcom, who also goes by Kim Schmitz and Kim Tim Jim Vestor, was one of those arrested.
In 2002, Dotcom, then using the name Schmitz, was deported from Thailand to Germany to face insider trading and fraud charges. He was a hacker who cracked the computer systems of banks and government organizations including those of Citibank Ltd. and the U.S. Pentagon, then fled to Thailand to avoid indictment in Germany, Deutsche Presse Agentur reported.
The other three taken into custody were: Finn Batato, a German resident and chief marketing officer, Mathias Ortmann, co-founder and director, and Bram van der Kolk, who oversees programming of the Megaupload websites.
Julius Bencko, a resident of Slovakia and graphic designer, Sven Echternach, a resident of Germany and head of business development, and Andrus Nomm, a citizen of Estonia and head of software development, were also charged.
The case is U.S. v. Dotcom, 12-00003, U.S. District Court, Eastern District of Virginia (Alexandria).
WELLINGTON, New Zealand – With 150 million registered users, about 50 million hits daily and endorsements from music superstars, Megaupload.com was among the world’s biggest file-sharing sites. Big enough, according to a U.S. indictment, that it earned founder Kim Dotcom $42 million last year alone.
The movie industry howled that the site was making money off pirated material. Though the company is based in Hong Kong and Dotcom was living in New Zealand, some of the alleged pirated content was hosted on leased servers in Virginia, and that was enough for U.S. prosecutors to act.
The site was shut down Thursday, and Dotcom and three Megaupload employees were arrested in New Zealand on U.S. accusations that they facilitated millions of illegal downloads of films, music and other content, costing copyright holders at least $500 million in lost revenue.
New Zealand Police also seized guns, artwork, more than $8 million in cash and luxury cars valued at nearly $5 million after serving 10 search warrants at several businesses and homes around the city of Auckland.
News of the shutdown seemed to bring retaliation from hackers who claimed credit for attacking the Justice Department’s website. Federal officials confirmed it was down for hours Thursday evening and that the disruption was being “treated as a malicious act.”
A loose affiliation of hackers known as “Anonymous” claimed credit for the attack. Also hacked was the site for the Motion Picture Association of America.
On Friday, New Zealand’s Fairfax Media reported that the four defendants stood together in an Auckland courtroom in the first step of extradition proceedings that could last a year or more.
Dotcom’s lawyer raised objections to a media request to take photographs and video, but then Dotcom spoke out from the dock, saying he didn’t mind photos or video “because we have nothing to hide.” The judge granted the media access, and ruled that the four would remain in custody until a second hearing Monday.
Dotcom, Megaupload’s former CEO and current chief innovation officer, is a resident of Hong Kong and New Zealand and a dual citizen of Finland and Germany who had his name legally changed. The 37-year-old was previously known as Kim Schmitz and Kim Tim Jim Vestor.
Two other German citizens and one Dutch citizen also were arrested and three other defendants — another German, a Slovakian and an Estonian — remain at large.
The Electronic Frontier Foundation, which defends free speech and digital rights online, said in a statement that the arrests set “a terrifying precedent. If the United States can seize a Dutch citizen in New Zealand over a copyright claim, what is next?”
The indictment was unsealed one day after websites including Wikipedia and Craigslist shut down in protest of two congressional proposals intended to make it easier for authorities to go after sites with pirated material, especially those with overseas headquarters and servers.
Before Megaupload was taken down, the company posted a statement saying allegations that it facilitated massive breaches of copyright laws were “grotesquely overblown.”
“The fact is that the vast majority of Mega’s Internet traffic is legitimate, and we are here to stay. If the content industry would like to take advantage of our popularity, we are happy to enter into a dialogue. We have some good ideas. Please get in touch,” the statement said.
Several sister sites were also shut down, including one dedicated to sharing pornography files.
The $8 million in cash seized had been invested in various New Zealand financial institutions, and has been placed in a trust pending the outcome of the cases.
Police spokesman Grant Ogilvie said the seized cars include a Rolls Royce Phantom Drophead Coupe worth more than $400,000. Two short-barreled shotguns and a number of valuable artworks were also confiscated, he added.
According to the indictment, Megaupload was estimated at one point to be the 13th most frequently visited website on the Internet. Current estimates by companies that monitor Web traffic place it in the top 100.
Megaupload is considered a “cyberlocker,” in which users can upload and transfer files that are too large to send by email. Such sites can have perfectly legitimate uses. But the Motion Picture Association of America, which has campaigned for a crackdown on piracy, estimated that the vast majority of content being shared on Megaupload was in violation of copyright laws.
The website allowed users to download some content for free, but made money by charging subscriptions to people who wanted access to faster download speeds or extra content. The website also sold advertising.
Megaupload was unique not only because of its massive size and the volume of downloaded content, but also because it had high-profile support from celebrities, musicians and other content producers who are most often the victims of copyright infringement and piracy. Before the website was taken down, it contained endorsements from Kim Kardashian, Alicia Keys and Kanye West, among others.
The company listed Swizz Beatz, a musician who married Keys in 2010, as its CEO. He was not named in the indictment and declined to comment through a representative.
The five-count indictment, which alleges copyright infringement as well as conspiracy to commit money laundering and racketeering, described a site designed specifically to reward users who uploaded pirated content for sharing, and turned a blind eye to requests from copyright holders to remove copyright-protected files.
For instance, users received cash bonuses if they uploaded content popular enough to generate massive numbers of downloads, according to the indictment. Such content was almost always copyright protected, the indictment said.
The Justice Department said it was illegal for anyone to download pirated content, but their investigation focused on the leaders of the company, not end users who may have downloaded a few movies for personal viewing.
A lawyer who represented the company in a lawsuit last year declined to comment Thursday. Efforts to reach an attorney representing Dotcom were unsuccessful.
Although Megaupload is based in Hong Kong, the size of its operation in the southern Chinese city was unclear. The administrative contact listed in its domain registration, Bonnie Lam, did not respond immediately for a request for comment sent to a fax number and email address listed.
The indictment was returned in the Eastern District of Virginia, which claimed jurisdiction in part because some of the alleged pirated materials were hosted on leased servers in Ashburn, Virginia. Prosecutors there have pursued multiple piracy investigations.
The Justice Department also was investigating the “significant increase in activity” that disrupted its website. It said in a statement that it was working to “investigate the origins of this activity, which is being treated as a malicious act until we can fully identify the root cause.”
The site appeared to be working again late Thursday. A spokesman for the Motion Picture Association of America said in an emailed statement that the group’s site also had been hacked, but it too appeared to be working later in the evening.
“The motion picture and television industry has always been a strong supporter of free speech,” the spokesman said. “We strongly condemn any attempts to silence any groups or individuals.”
