Microsoft says it snooped on Hotmail to track leak

Mar 21, 2014 by Ryan Nakashima
Microsoft logo

Microsoft Corp., which has skewered rival Google Inc. for going through customer emails to deliver ads, acknowledged Thursday it had searched emails in a blogger's Hotmail account to track down who was leaking company secrets.

John Frank, deputy general counsel for Microsoft, which owns Hotmail, said in a statement Thursday that the software company "took extraordinary actions in this case." In the future, he said, Microsoft would consult an outside attorney who is a former judge to determine if a court order would have allowed such a search.

The case involves former employee Alex Kibkalo, a Russian native who worked for Microsoft as a software architect in Lebanon.

According to an FBI complaint alleging theft of trade secrets, Microsoft found Kibkalo in September 2012 after examining the Hotmail account of the blogger with whom Kibkalo allegedly shared proprietary Microsoft code. The complaint filed Monday in federal court in Seattle did not identify the blogger.

"After confirmation that the data was Microsoft's proprietary trade secret, on September 7, 2012, Microsoft's Office of Legal Compliance (OLC) approved content pulls of the blogger's Hotmail account," says the complaint by FBI agent Armando Ramirez.

The search of the email account occurred months before Microsoft provided Ramirez with the results of its internal investigation in July 2013.

The email search uncovered messages from Kibkalo to the blogger containing fixes for the Windows 8 RT operating system before they were released publicly. The complaint alleges Kibkalo also shared a that could be used by hackers to understand more about how Microsoft uses product keys to activate software.

Besides the email search, Microsoft also combed through instant messages the two exchanged that September. Microsoft also examined files in Kibkalo's cloud storage account, which until last month was called SkyDrive. Kibkalo is accused of using SkyDrive to share files with the blogger.

Kibkalo has since relocated to Russia, the FBI complaint says.

Frank said in his statement that no was needed to conduct the searches.

"Courts do not issue orders authorizing someone to search themselves," he said. "Even when we have probable cause, it's not feasible to ask a court to order us to search ourselves."

Hotmail's terms of service includes a section that says, "We may access or disclose information about you, including the content of your communications, in order to ... protect the rights or property of Microsoft or our customers."

Redmond, Washington-based Microsoft has taken a defiant stand against intrusions of customer privacy, in the wake of National Security Agency systems analyst Edward Snowden's revelations of government snooping into online activities.

General counsel Brad Smith said in a blog post in December that Microsoft was "especially alarmed" at news reports of widespread government cyber-spying.

Microsoft also has a long-running negative ad campaign called "Scroogled," in which it slams Google for scanning "every word in every email" to sell ads, saying that "Google crosses the line."

Explore further: Ex-Microsoft worker accused of trade-secret leaks (Update)

2.6 /5 (7 votes)
add to favorites email to friend print save as pdf

Related Stories

Novell loses appeal on case against Microsoft

Sep 24, 2013

A federal appeals court is throwing out Novell Inc.'s complaint that Microsoft Corp. undermined the WordPerfect writing program in favor of Microsoft's own Word program with the Windows 95 rollout.

Syrian group hacks Skype

Jan 02, 2014

The Syrian Electronic Army hacker group set its sights on Skype's social media accounts Wednesday to accuse Microsoft of spying on user data.

Recommended for you

US probe links NKorea to Sony hacking

2 hours ago

A U.S. official says federal investigators have now connected the Sony Pictures Entertainment Inc. hacking to North Korea and are expected to make an announcement in the near future.

Sites stumble on to malware path with plugin exploit

Dec 16, 2014

The numbers were not pretty. Over 100,000 WordPress websites may have been infected with malware, once again proving that where there is widespread popularity, whether in operating systems or platforms or ...

Norway probes spy equipment found in central Oslo

Dec 15, 2014

Norwegian police said Sunday they have warned politicians about possible eavesdropping of cellphone calls after several listening devices were reportedly found in central Oslo, including near government buildings and Parliament.

Identity theft victims face months of hassle

Dec 14, 2014

As soon as Mark Kim found out his personal information was compromised in a data breach at Target last year, the 36-year-old tech worker signed up for the retailer's free credit monitoring offer so he would ...

Your info has been hacked. Now what do you do?

Dec 14, 2014

Criminals stole personal information from tens of millions of Americans in data breaches this past year. Of those affected, one in three may become victims of identity theft, according to research firm Javelin. ...

User comments : 1

Adjust slider to filter visible comments by rank

Display comments: newest first

akshayjamwal
not rated yet Mar 21, 2014
What I find odd is why the blogger would be using Hotmail in the first place. It's like using Gmail for a leaked story on Google. Discretion wasn't his strong suit, apparently.

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more

Click here to reset your password.
Sign in to get notified via email when new comments are made.