Posted on 12/29/2023 3:06:14 PM PST by nickcarraway
Rockstar Games told a U.K. court that it spent $5 million to recover from the hack. Is that worth the rest of a teenager's life?
Last week, a judge in the U.K. sentenced a teenager to an indefinite hospitalization for committing cybercrimes.
In September 2022, a user named Teapotuberhacker uploaded 90 videos onto the internet forum GTAForums. Collectively, the videos constituted more than 50 minutes of unfinished gameplay footage from Grand Theft Auto VI, a long-anticipated video game under development by Rockstar Games.
In a post on X (formerly Twitter), Rockstar Games confirmed the authenticity of the footage, blaming the leak on a "network intrusion in which an unauthorized third party illegally accessed and downloaded confidential information from our systems." At the time, video game blog Kotaku called it "one of the largest video game leaks in history."
On September 22, just days after the leak, London Police arrested a British teenager for the hack. As it happened, the suspect—later identified as 17-year-old Arion Kurtaj, a member of the cybercrime gang Lapsus$—had already been arrested for hacking tech company Nvidia and U.K. telecom BT/EE. Even though he was in police custody at a Travelodge and his laptop had been confiscated, Kurtaj managed to hack into Rockstar using only his cell phone, a hotel TV, and an Amazon Firestick.
In August, a jury determined that Kurtaj had committed the acts alleged, although this was different than a guilty verdict: "Kurtaj is autistic and psychiatrists deemed him not fit to stand trial so he did not appear in court to give evidence," the BBC reported. "The jury were asked to determine whether or not he did the acts alleged—not if he did it with criminal intent." The outlet further reported that "Kurtaj had been violent while in custody with dozens of reports of injury or property damage."
Last week, according to the BBC, Judge Patricia Lees sentenced the teen to "remain at a secure hospital for life unless doctors deem him no longer a danger," on the basis that "Kurtaj's skills and desire to commit cyber-crime meant he remained a high risk to the public."
But…what exactly is the harm that has been alleged? In fairness, Kurtaj not only hacked firms like Rockstar and BT/EE but he also blackmailed the companies, asking the latter for $4 million (which was not paid).
The Guardian noted after the Grand Theft Auto hack that "there will be financial consequences, as Rockstar investigates the leak and likely evaluates working practices," while its parent company "may well face a dip in its stock value as well as uncomfortable questions from shareholders."
No doubt, the leak was embarrassing, and Rockstar told the court that it spent $5 million to recover from the hack. But it would be difficult to make the case that Rockstar was irreparably harmed by the unauthorized disclosure: Earlier this month, when the company finally released the official first-look trailer for Grand Theft Auto VI, it accrued more than 90 million views in 24 hours—more than any other video game reveal in YouTube history, according to Guinness World Records.
Speaking of records, 2013's Grand Theft Auto V, the previous title in the franchise, has sold more than 185 million copies, more than any game in history with the exceptions of Minecraft and Tetris. After the trailer debuted, the BBC's Eric Alt wrote that the franchise's sixth installment "may not only succeed – but blow its predecessor's revenue out of the water."
"In sentencing hearings, Kurtaj's defence team argued that the success of the game's trailer indicated that Kurtaj's hack had not caused serious harm to the game developer and asked that this be factored into the sentencing," the BBC reported last week. But the judge "said that there were real victims and real harm caused from his other multiple hacks on individuals and the companies he attacked with Lapsus$."
Perhaps so. But it's worth asking if Kurtaj's crimes are worth potentially spending the rest of his life in custody, especially when the jury that condemned him was not even asked to consider whether he possessed criminal intent.
I’m fine with burning hackers at the stake in the public square.
L
>> Last week, a judge in the U.K. sentenced a teenager to an indefinite hospitalization for committing cybercrimes.
Judge smells like a total POS
“I’m fine with burning hackers at the stake in the public square.”
Agree - but I suspect that he tried to hide behind an Austism defense. Well, with a life sentence, he just found out that trick doesn’t work, at least with that judge.
“ Even though he was in police custody at a Travelodge and his laptop had been confiscated, Kurtaj managed to hack into Rockstar using only his cell phone, a hotel TV, and an Amazon Firestick.”
He won’t serve a day in jail because MI-6 will hire him.
“indefinite hospitalization”??
what kind of sentence is that?
It isn’t a sentence.
It is a mental health finding, in this case involving an individual with violent incidents at least while in custody.
The kind the Soviet Union used to issue.
So...he's being sentenced to life for embarassing the police?
Rockstar Games should hire him to expose and prevent any future security lapses. Have him work off the $5m. The kid is a genious, but may have to kept in a secluded spot away from others.
Him being Autistic and taking away his computers and electronics (probably his only expertise) would be torture and would only lead to uncontrollable anger and more violence.
“So...he’s being sentenced to life for embarassing the police?”
He was ordered to stay off the internet. And he attacked a few people while in custody.
Judges frown on that behavior.
L
I'm kinda thinking "yeah." You cost a company 5 million, would you ever earn that much in your entire life? Probably not.
But let's see what the teenager did before we decide he should be held accountable for it, and how much accountable.
And no company would ever exaggerate the loss.
The company apparently wasn’t investing enough in security.
I’m appalled that so many organizations have everything connected to the Internet. If it’s so important or secret, put it on an air-gapped network.
The coming cyberattack was always preventable.
A modern clockwork orange and putting the new lead in hospital till he’s better?
My first thought was that 5 million was a ridiculous exaggeration of the loss.
Did they actually lose 5 million dollars, or did they *CHOOSE* to spend it to upgrade their security?
Not the same thing at all in my mind.
Obviously hacking is a crime, but we know they are out there. Companies that leave there IP not properly secured are asking for something bad to happen.
1. IMHO the company gained enormous publicity from this. No damage.
2. Give the kid a couple million $ for toys and send him to either our, or the Brits, embassy in Beijing. See what he can do against China.
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.