• Tag Archives Hemisphere
  • Shareholders Demand Transparency for AT&T’s Hemisphere Phone Records Spying Program

    A group of investors in AT&T have had it with the phone company’s collaboration with law enforcement through the Hemisphere program, in which the company facilitates police access to trillions of phone records. At the spring shareholder conference, Zevin Asset Management plans to force discussion of contradictions between AT&T’s stated commitment to privacy and civil liberties and the Hemisphere program. One of the chief goals is to demand greater transparency over the highly secretive program.

    As EFF recently reported, police refer to Hemisphere as a “Super Search Engine” and “Google on Steroids” because it provides access to trillions of domestic and international phone call records dating back 30 years.  Each day, approximately 4 billion phone records are added to the system, including calls from non-AT&T customers that pass through the company’s switches and even when a customer changes phone numbers. Hemisphere can also map out social relationships and pinpoint locations of callers.

    Federal law enforcement officials are able to obtain this information without going through a judge, and they are instructed to take devious measures to keep the program out of the public record. AT&T is not a passive responder to police demands. Rather, AT&T retains records longer than its competitors, places its employees at the regional hubs of drug interdiction task forces, and requires police to hide their use of Hemisphere.

    Nobody is forcing AT&T to do this; the company could end the Hemisphere program tomorrow.

    In a post on Medium, Pat Miguel Tomaino, Zevin Asset Management’s Associate Director of Socially Responsible Investing, explains how the shareholders must use their investments to resist threats to civil liberties under the incoming Trump administration. He writes:

    We are shining a light on AT&T’s Hemisphere program, a giant database of customer calls which AT&T runs as a lucrative business line, charging law enforcement agencies upwards of $1 million for bespoke searches and analytics. AT&T says that it follows the law and hands over customer data only when police present a legal demand. But why does AT&T retain more call data than peer companies like Verizon and Sprint? Why does the company allegedly force law enforcement agencies to keep Hemisphere a secret? At AT&T’s annual meeting next year, Zevin will push for answers on this risky business and for an explanation of the gap between the company’s responsible-sounding privacy policies and Hemisphere’s immense scope.

    EFF has been fighting for more than a year in state and federal courts for records related to the Hemisphere program to hold the government accountable. Our efforts have yielded, for example, the police email calling Hemisphere “Google on steroids.” But private companies like AT&T are not subject to Freedom of Information laws. So we are pleased to see AT&T shareholders holding the company to account, and trying to compel it to publicly report on the consistency between its Hemisphere spying program and its own privacy policies.

    Read the shareholder proposal [.pdf].

    Source: Shareholders Demand Transparency for AT&T’s Hemisphere Phone Records Spying Program | Electronic Frontier Foundation


  • Law Enforcement’s Secret “Super Search Engine” Amasses Trillions of Phone Records for Decades

    Although the government still hides too much information about a secret telephone records surveillance program known as Hemisphere, we have learned through EFF’s Freedom of Information Act (FOIA) lawsuits that police tout the massive database of private calls as “Google on Steroids” [pdf].

    Hemisphere, which AT&T operates on behalf of federal, state, and local law enforcement, contains trillions of domestic and international phone call records dating back to 1987. AT&T adds roughly four billion phone records to Hemisphere each day [.pptx], including calls from non-AT&T customers that pass through the company’s switches.

    The Drug Enforcement Agency (DEA) and other federal, state and local police use Hemisphere to not only track when and who someone is calling, but to perform complicated traffic analysis that can dynamically map people’s social networks and physical locations. This even includes knowing when someone changes their phone number.

    And federal officials often do it without first getting permission from a judge.

    Indeed, Hemisphere was designed to be extremely secret, with police instructed to do everything possible to make sure the program never appeared in the public record. After using Hemisphere to obtain private information about someone, police usually cover up their use of Hemisphere by later obtaining targeted data about suspects from phone providers through traditional subpoenas, a process the police call “parallel construction” and that EFF calls “evidence laundering.”

    Government Treats Same Information Differently in FOIA Cases

    Government secrecy about Hemisphere has extended to refusing to disclose basic records about the program, and EFF has had to sue federal and California law enforcement to win access to this critical information. EFF filed another round of briefing in federal court in November calling on the government to provide records as soon as possible, given that we made our FOIA request almost two years ago. The delayed resolution in federal court has stalled a related lawsuit EFF brought against California law enforcement agencies for access to their records about Hemisphere.

    We aren’t the only ones suing: the Electronic Privacy Information Center filed similar litigation, which has allowed us to learn even more about Hemisphere, including how the federal government has used inconsistent arguments to avoid public scrutiny of the program.

    In EFF’s case earlier this month, the government filed a list of Hemisphere records that the government is withholding from both EFF and EPIC. This list shows the government treated the two requesters differently.  Specifically, the chart shows that out of the 161 pages common to both lawsuits, the government claimed more than twice as many legal reasons to withhold the majority of pages from EFF. The government withheld 151 pages from EFF (but not EPIC) on the grounds that disclosure could interfere with an ongoing law enforcement investigation. And it withheld 107 pages from EFF (but not EPIC) because disclosure would supposedly out confidential informants.

    The government has yet to explain why it treated the exact same information so differently in EFF’s and EPIC’s respective FOIA requests. Absent any explanation, the disparate treatment appears highly arbitrary. Moreover, it highlights the large power imbalance between the government and FOIA requesters seeking records.

    Agencies know exactly what the documents contain and are in the best position to use or abuse FOIA’s exemptions to withhold them. This asymmetry is often to the government’s advantage. The government’s inconsistent treatment of EFF’s and EPIC’s FOIA requests show why FOIA should better limit officials’ discretion to treat requesters so differently, and better ensure judicial oversight over the entire FOIA process.

    Disclosed Docs Show Police View Hemisphere as a “Super Search Engine”

    Before the Hemisphere Program came to light in 2013, when a presentation was inadvertently released to a privacy activist, the public knew nothing about the massive phone records dragnet.

    Through the program, AT&T assists federal and local law enforcement—often by stationing company staff in police “Fusion Centers”—in accessing and analyzing AT&T’s massive database of call detail records (CDRs). This information includes phone numbers dialed and calls received, as well as the time, date, and length of the call, and sometimes location information.  This information isn’t limited to AT&T customers either.

    From the records that have been disclosed in EFF’s lawsuits, we’ve learned that police view the astonishing size and scope of the database as an asset, referring to it as the “Super Search Engine” and “Google on Steroids.” Such descriptions confirm EFF’s worst fears that Hemisphere is a mass surveillance program that threatens core civil liberties.

    The program poses severe Fourth Amendment concerns because police are obtaining detailed private information from the call records and learning even more about people’s social connections and physical movements based on pattern analysis. Federal officials do all of this without a warrant or any judicial oversight.

    But beyond the Fourth Amendment problems, Hemisphere also poses acute risks to the First Amendment rights of callers caught in the program’s dragnet. Specifically, Hemisphere allows police to see a person’s associations, shedding light on their personal connections and political and social networks. It’s not hard to see such a tool being trained on activists and others critical of law enforcement, or being used by the government to identify entire organizations. We know that law enforcement officials have subjected Black Lives Matter activists to automated social media monitoring, and subjected attendees at gun shows to surveillance by automated license plate readers. Government officials can easily use Hemisphere in similar ways.

    The Hemisphere program could not operate without AT&T’s full cooperation. It’s time for AT&T to reconsider its responsibility not only to its customers, but to all Americans who pick up the phone.

    Source: Law Enforcement’s Secret “Super Search Engine” Amasses Trillions of Phone Records for Decades | Electronic Frontier Foundation


  • AT&T requires police to hide Hemisphere phone spying

    AT&T built a powerful phone surveillance tool for police, called Hemisphere. Every day, AT&T adds four billion call records to Hemisphere, making it one of the largest known reservoirs of communications metadata that the government uses to spy on us. Law enforcement officials kept Hemisphere “under the radar” for many years—hidden from courts, legislators, and the general public—until the New York Times exposed the program in 2013. EFF sued federal and state law enforcement officials to obtain records about Hemisphere, in part to better understand how and why police kept such a massive spying database secret for so long.

    New documents published by The Daily Beast earlier this week reveal that AT&T required this corrosive secrecy. Specifically, the contract AT&T prepared for police seeking access to Hemisphere provides:

    [T]he Government agency agrees not to use the data as evidence in any judicial or administrative proceedings unless there is no other available and admissible probative evidence. The Government Agency shall make every effort to insure that information provided by the Contractor is non-attributable to AT&T if the data isprovided to a third-party.

    In other words, the first rule of Hemisphere is: you do not talk about Hemisphere. We knew this is the government’s rule. Now we know this is AT&T’s rule, too.

    What do police do with the Hemisphere evidence that they cannot talk about? According to a Hemisphere training document, police must “wall off” that evidence, and then recreate it with a traditional subpoena. Police call this “parallel construction.” EFF calls it “evidence laundering.”

    The harms of secrecy

    This secrecy—imposed by AT&T—is highly disturbing for many reasons. Three deserve emphasis.

    First, this secrecy hides Hemisphere from democratic oversight. Hemisphere enables police to map our intimate social relationships by data-mining massive amounts of our call records, usually without a warrant. Yet because of Hemisphere’s secrecy, judges cannot rule on whether the program violates the Fourth Amendment. Legislators cannot oversee the program and enact appropriate legislation. Voters cannot hold their elected officials accountable. Everyone is in the dark, except for a small number of law enforcement and corporate executives, who unilaterally decided to impose this highly intrusive program on the rest of us.

    Second, this secrecy deprives criminal defendants of their constitutional right to a fair trial. Under Brady v. Maryland, police must disclose favorable evidence to the defense. When police hide their sources of evidence, the accused cannot challenge the quality or veracity of the government’s investigation, or seek out favorable information still in the government’s possession. Moreover, hiding evidence from individuals who are prosecuted as a result of such surveillance is antithetical to our fundamental right to an open criminal justice system.

    Third, the new revelation clarifies AT&T’s role in the Hemisphere program. AT&T suggests that all it is doing is passively responding to lawful government demands for information about its customers. In fact, AT&T actively imposes secrecy on police who wish to use AT&T’s Hemisphere program. AT&T’s motives for imposing this secrecy are not presently known. Perhaps AT&T is seeking to avoid public scrutiny of its Hemisphere business model, which earns millions of dollars from police officials in exchange for access to private phone records that AT&T retains for many years longer than its competitors do.

    Sadly, this isn’t the first time that police and corporations worked together to hide from the public their deployment of highly invasive spying tools. For example, corporate nondisclosure agreements contributed to years of secrecy about police use of cell site simulators, often called “Stingrays,” which masquerade as cell phone towers and thus force all phones in the area to disclose sensitive information to the police.

    Next steps

    We must fully expose Hemisphere to the light of public scrutiny. EFF has used public records laws to uncover many Hemisphere records, and we will add any other documents we obtain to our public library of Hemisphere records.

    Looking forward, we must stop the police and their corporate suppliers from unilaterally and secretly deploying new surveillance technologies in the first place. Rather, the decision whether to adopt these sensitive tools should be made by elected officials, at open meetings, following ample opportunity for the general public to study the matter and have their voices heard. EFF supports a national campaign to enact laws requiring this process. In many cases, an informed citizenry and their elected officials will say “no” to new spying tools. In other cases, elected officials will impose necessary privacy safeguards.

    AT&T and the police tried to keep Hemisphere secret. They failed. The time has come to end the Hemisphere program. As a matter of constitutional law and basic privacy principles, the police should not be allowed, without case-by-case judicial oversight, to scrutinize our social relationships with a database of trillions of phone records.

    Source: AT&T requires police to hide Hemisphere phone spying | Electronic Frontier Foundation