A U.S. government panel has asked a corporate ethics lawyer from Hewlett-Packard (HP) to testify in its Sept. 28 hearing on the company’s use of “pretexting” to spy on journalists, board members and other employees.
The investigative unit of the U.S. House Energy and Commerce Committee announced Wednesday that it has asked HP Senior Counsel Kevin Hunsaker and Fred Adler, a company computer security investigator, to join a growing list of witnesses.
The subcommittee had also previously requested testimony from outgoing HP Chairwoman Patricia Dunn, HP General Counsel Ann Baskins, HP Global Security Manager Anthony Gentilucci, outside attorney Larry Sonsini and outside investigators.
The practice of “pretexting” usually involves pretending to be a person in order to obtain that person’s personal information. An HP spokesman declined to comment.
Up until now, Dunn has insisted she merely initiated the probe of boardroom leaks, and was ignorant of specific techniques used by investigators.
“Unfortunately, the investigation, which was conducted with third parties, included certain inappropriate techniques. These went beyond what we understood them to be, and I apologize that they were employed,” Dunn said in a recent statement.
But e-mail correspondence examined by newspapers including The Wall Street Journal and The New York Times indicates that top HP officials solicited Dunn’s opinion and questioned investigation techniques throughout the course of the leak probe.
As early as Aug. 6, 2005, HP’s Gentilucci asked for Dunn’s advice about using “internal and external sources” to gather intelligence on “interested parties,” according to company e-mail seen by The Wall Street Journal. Gentilucci offered to brief HP management on more details of “Project Kona” in a proposed meeting on Aug. 31. It is still unknown if that meeting took place, but Dunn replied to the e-mail, promising to respond.
By Jan. 28, 2006, e-mail from Hunsaker to Adler shows that HP’s own lawyers were closely questioning investigation techniques, according to The Wall Street Journal. Asked whether HP could legally spy on board members’ cell-phone text messages, Adler replied: “Even if we could legally obtain the records, which we can’t unless we pay the bill or get consent, I would highly suspect text-messaging records are not kept due to volume and expense.”
It is unclear if HP obtained text messages. But in an April 28 e-mail to Gentilucci and an outside investigator, Ron DeLia of Security Outsourcing Solutions in Boston, Hunsaker said he was writing at General Counsel Baskins’ request to confirm the details of how the investigation team obtained phone records, according to the Journal. In the e-mail, Hunsaker described how investigators were making “pretext calls.”
Hunsaker also said in the e-mail that his legal research confirmed that pretexting is legal. However, California Attorney General Bill Lockyer has said that using fraudulent means to obtain personal information is not legal in the state. Lockyer has said he has evidence to charge people outside and inside HP.
House investigators have also asked for testimony from DeLia and private investigator Joe Depante, owner of Action Research Group, which was reportedly hired by HP to help in the investigation.
Dunn agreed on Sept. 12 to resign her own position, and will be replaced in January by current chief executive Mark Hurd.
-Ben Ames, IDG News Service (Boston Bureau)
Check out our CIO News Alerts and Tech Informer pages for more updated news coverage.