Social Media Editor Charged with Conspiring in “Anonymous” Hack

Reuters editor, Matthew Keys, allegedly provided hackers with login information to access the Tribune Company's computer system

A journalist has vowed that Friday would be "business as usual" despite charges of conspiring with the notorious hacking group "Anonymous" to deface an online story of the Los Angeles Times.

Federal authorities allege that Matthew Keys provided hackers with login information to access the Tribune Company's computer system in December 2010. Keys had been fired months before from a Sacramento television station owned by Tribune. Keys was a web producer for KTXL. Tribune also owns the Times.

The investigators allege that Keys gave a hacker named "Sharpie" the information in an Internet chat room frequented by hackers and urged the hacker to do some damage to the Tribune company.

"I am fine," the Reuters social media editor said on his Twitter account Thursday, hours after his federal indictment was announced. "I found out the same way most of you did: From Twitter. Tonight I'm going to take a break. Tomorrow, business as usual."

According to the indictment, Sharpie altered a Times news story posted Dec. 14 and 15, 2010, to read "Pressure builds in House to elect CHIPPY 1337," a reference to another hacking group. "Chippy 1337" claimed responsibility for defacing the website of video game publisher Eidos in 2011. Reuters hired Keys in 2012 as a deputy editor for social media and he was at work Thursday. He didn't return a phone call or respond to email messages seeking comment.

Reuters spokesman David Girardin said Keys began working for the company in 2012 and it was "aware" of the indictment. Girardin declined to comment further.

The indictment alleges that a second attempt to hack the Times was unsuccessful.

According to Keys' Facebook page, he worked as an online news producer for the Sacramento FOX affiliate KTXL from June 2008 to April 2010.

Federal prosecutors allege in court papers that a legendary hacker and Anonymous leader named "Sabu" offered advice on how to infiltrate Tribune's systems. The FBI unmasked Sabu when they arrested Hector Xavier Monsegur on June 7, 2011. Monsegur secretly worked as an FBI informant until federal officials announced that he helped them arrest five other alleged hackers on March 6, 2012.

Federal officials declined to comment on whether Sabu assisted in the investigation of Keys.

The day after it was announced that Sabu was an FBI informant, Keys wrote a story for Reuters about "infiltrating" the hackers' chat room.

Keys is charged with one count each of conspiracy to transmit information to damage a protected computer, as well as transmitting and attempting to transmit that information. If convicted, the New Jersey native faces a combined 25 years prison and a $500,000 fine if sentenced to the maximum for each count.

He is scheduled for arraignment in Sacramento federal court April 12.

The indictment comes on the heels of recent hacks into the computer systems of two other U.S. media companies that own The New York Times and The Wall Street Journal. Both newspapers reported in February that their computer systems had been infiltrated by China-based hackers, likely to monitor media coverage the Chinese government deems important.

The hacker group Anonymous and its offshoot Lulz Security have been linked to a number of high profile computer attacks and crimes, including many that were meant to embarrass governments, federal agencies and corporate giants. They have been connected to attacks that took data from FBI partner organization InfraGard, and they've jammed websites of the CIA and the Public Broadcasting Service.

A computer security specialist said the incident would be an unusual hack if the government's charges are accurate.

"This is first case where I've heard of someone leaking stuff to Anonymous to have a site defaced, instead of defacing it himself," said Clifford Neuman, director of University of Southern California Center for Computer Systems Security. "He found some way to achieve his ends of defacing the website without having to do it himself."

A spokesman for the Chicago-based Tribune Co. declined to comment.

While Keys did not directly address the federal charges Thursday through his voluminous Twitter feed, commentary from his more than 23,500 followers and even a story about the news indictment were retweeted from his account.

He did not address the issue on his Facebook page, where his last posting Thursday was about the best way to make a grilled cheese sandwich.

According to Keys' Facebook profile, he is single, lives in New York City and works at Thomson Reuters Corp.'s New York office, where "I get paid to use Twitter and Facebook at work."

Reuters has been expanding its business in the United States. This year, six of Tribune's seven newspapers dropped The Associated Press for Reuters, citing cost savings. The Los Angeles Times stayed with AP.

Copyright AP - Associated Press
Contact Us