Shawn Carpenter awarded 4.7mil vs. Sandia Labs
In January of 2006 I posted about an article called “Chinese Cyber Spies and the Idiocy of Bureaucracy” Security Analyst Shawn Carpenter regarding his wrongful termination from Sandia Labs. It seems that during the course of his duties for Sandia Labs Mr. Carpenter identified an ongoing series of attacks that appeared to be directly from the Chinese government, he dubbed this effort “Titan Rain“. Mr. Carpenter sought assistance from his supervisors and upon being snubbed he went to the FBI with the information he had gathered in an effort to protect national security interests, for this he was terminated from Sandia and had his security clearances temporarily striped.
This is no big surprise as information warfare of this sort is not uncommon and the government who doesn’t employ it is far behind the current trend. Now, more than two years later, a jury trial has awarded Shawn Carpenter almost 4.7 million dollars in compensation for back wages and wrongful termination in his court case vs Sandia.
Wary of the gray legal area involved in tracking Internet attacks back to foreign servers, Sandia supervisors told Carpenter that it wasn’t in the lab’s interest to follow or stop the attackers. They ordered him to stop and not to share information on the attacks, even after the FBI had requested permission to have him work the case under their supervision.
The attacks — code named Titan Rain — are still hitting secure government networks here and abroad. And the country can thank in large measure the type of fecklessness that Sandia’s managers showed in handling Carpenter’s case. Sandia actually has a huge security apparatus designed to ensure that the nuclear lab’s secrets stay safe. But when Carpenter said he would continue trying to solve the case on his own time as a matter of conscience, Sandia trained that security apparatus on him. They investigated him, harangued him, stripped him of his security clearance and ultimately fired him.
Hat tip goes to WiresnSparks for the heads up.
On a side note, they mention the “Grey Legal Area” in the article above. There is quite a bit of very beneficial work that goes on in the “Grey Legal Areas” between law enforcement and the civilian sector. The actions by Sandia Labs in this case sent a message to people in this area that added an additional threat to an already dangerous undertaking. This ruling sends a fairly clear message, in my opinion, that work in these areas can continue and while it is far from “safe” for those who choose to do it at least it’s not getting any worse.