From: Pekka Aakko Subject: Re: Searching for Finnish police documents re anon.penet.fi raid To: rnewman@cybercom.net (Ron Newman) Date: Tue, 12 Dec 1995 00:52:16 +0200 (EET) Here is the revised and much more complete translation of the Helsinki documents (at least those 12 pages I have): Helsinki Police Documents (revised translation) ----------------------------------------------- Translation by Pekka Aakko (pehu@icon.fi). The translation has been done to the best of my ability, and hope this is of some use for you. You are free to spread this around and use it freely in whatever publications as long as this text stays unmodified. You can modify it thou but please state it that you have done it (I am not native english speaker, there might be syntax flaws etc). If modified, the origins of the translation should be stated thou. The original text is in finnish and and swedish and can be obtained from the finnish police. In some parts of the texts I have corrected the dates the US format and telephone numbers to proper international form. You can freely contact the local authorities here if you so wish. I have made few comments and they are always inside square brackets [ ]. Thanks to mr. Jacobsen for the originals. Yours, Pekka ================================================================================ ================================================================================ Report copy 06.02.1995 HELSINKI P.D REGISTRATION # 3300/R/105171/95 RTO Page 1 HEAD OF THE INVESTIGATION PULKKINEN PHONE +358-0-189 5388 INVESTIGATOR MALMBERG PHONE +358-0-189 5425 TAKEN IN 03.02.1995/12.40 [03-Feb-1995] MEANS OF CONTACTING LETTER INFORMANT SAVONEN, JUSSI ATTORNEY PHONE +358-0-6944966 Work CASE 1. UNAUTHORIZED USE TIME HAPPENED SAT 21.01.1995/12.44 - MON 23.01.1995/22.07 WHERE HAPPENED ALBERTINKATU 17 C 36 CITY 091/HELSINKI 11B/KAMPPI/RUOHOLAHTI PLAINTIFF: CHURCH OF SCIENTOLOGY INTERNATIONAL 6331 HOLLYWOOD BOULEVARD, SUITE 1200 LOS ANGELES, CALIFORNIA DEMANDS PUNISHMENT CASE: 1 PARTY: HELSINGIUS, JOHAN MIKAEL PRESIDENT ALBERTINKATU 17 C 36, 00120 HELSINKI PHONE +358-0-4002605, HOME CASE: 1 DESCRIPTION: There has been an unauthorized access of a computer and information has been stolen from it's files. The church's computer located in California has been broken into and information has been stolen from it by using another computer. The information thus stolen has been spread via Internet and publically made available there via a server located in Helsinki. This server is owned by Eunet Finland Oy. [Eunet Finland inc.] [end of document #1 of 12] Peltonen, …rndahl, Ruokonen & ItŠinen ------------------------------------- Lawyer's office Helsinki crimal investigation dept Jukka Peltonen Kai Malberg Peter …rndahl Leif ItŠinen Gerhard af Schulten Esa Salonen Jussi Manninen Telefax +358-0-189 2824 Risto Rouvari Jussi Savonen Tuna Tarma-Lindberg Marten Aspelin Petteri Sotamaa Jan …rndahl Harriet Lagus Helsinki, 3.2.1995 CASE: Request to investigate PLAINTIFF: Church of Scientology International, church California, United States of America 6331 Hollywood Boulevard Suite 1200, Los Angeles CA 90028-6329 U.S.A. REPRESENTATIVE: Attorney Jussi Savonen Lawyer's office Peltonen, …rndahl, Ruokonen & ItŠinen Oy Fredrikinkatu 48 A 00100 Helsinki Phone +358-0-694 4966 Fax +358-0-694 4206 REQUEST TO INVESTIGATE: 1. CASE Church of Scientology (CSI) is an American legal entity, with juridical form of church and domicile in Los Angeles, California. [End of document #2 of 12] On the ongoing year, between January 21st at 12.44 Finnish time and January 23rd at 22.07 Finnish time, an unknown person has penetrated without authorization into CSI's computer system, used it and stole information archived there in electric form. Stolen information has been spread January 23rd at 22.07 Finnish time to the Internet via a server located in Helsinki, Finland. The server is owned by Eunet Finland Oy, domicile on Helsinki and address as Punavuorenkatu 1, 00120 Helsinki. The use of this computer system and stealing of the information stored within has the charasteristics, by the plaintiff's view, of: unauthorized use (RL 30:4¤), industrial spying (RL 30:4¤) and trade secret missappropriation (RL 30:6¤). [RL = rikoslaki = criminal law]. 2. PROOF Data has been published in the Internet in electronic form (electronic mail) that can be proved to be originated from CSI's computer system. The data published in the Internet is a written report done in the CSI on January 21st 1995, which handles itself insignificant, but very delicate meeting of two people in Los Angeles (addendum 1). The meeting had generated discussion in the Internet discussion groups (newsgroup), from which the plaintiff is unaware of why it had started. The discussion consisted of different kinds of rumors, which attracted the attention of the readers of this newsgroup in such a way that these rumors became a certain "news". The discussion happened in a very general and inaccurate level. Also CSI became aware of the discussion and decided to clarify the discussion, as the event was claimed to have connections to the church of scientology or it's members. CSI assigned a private investigator called Gene Ingram to find out what the thing was really about. [End of document #3 of 12] The PI interviewed the female participant of the event and made notes about it. Based on these notes Gene Ingram gave an oral report about the things he found. The report was written into the CSI's computer system based on the oral version given by Gene Ingram by a person working for CSI. This is when the report got it's original form. The report was never printed out to paper. The report was never shown to any outsider. Only one person besides the employee whom received the oral report had become familiar with the contents of the written report before it was released to the Internet January 23rd 1995. The report itself did not give reason for any action on behalf of CSI. The text "published" (addendum 2) via the server located in Helsinki is the same with word to word with the original report, excluding some parts containing personal information. The information published in the Internet is absolutely surely originated from the report stored in the CSI's computer system. The document was never printed and wasn't given any other physical form before it was published in the Internet. The information thus published has been gained by unauthorized penetration to the CSI's computer system, by using the system and by stealing information from it. The information within CSI's computer system are CSI's trade secrets and also within the the range of client/lawyer secrecy. [<-This word, "asianajosalaisuus", is a boogeyman, but I think the translation I made here is what it means]. The plaintiff does not know if other information that can be counted as trade secrets has been illegally obtained apart from the information that was published. The plaintiff has reason to believe that such information could have been obtained a lot. 3. THE PERSON [End of document #4 of 12] It is possible to use the server located in Helsinki anonymously in a way, that the user via the server identifies in the Internet as a numeric ID, which is given to him/her by the server. The user is identified in the server with the "email address" that is needed to use the system. "Email address" consists of the name the user wants, which can be his/her real name or a short as well as nickname or a fantasy name. The user in this case can be identified via his email address. The user and the person who published the information is possible the same that has illegally penetrated CSI's computer system and stolen information from it. At least the person who published the information knows from where or from who he/she has gotten the information. It is essential to find out who is the person who used the anonymous server in Helsinki January 23rd 1995 at 22:07:53, with anonymous ID as "an144108&anon.penet.fi (- AB -)" (NOTE! The character after the numbers is wrong. The real one can be seen in the address information that can be seen in addendum 2). 4. WITNESS The chairman of the Eunet finland Oy, Johan Helsingius, address: Albertinkatu 17 C 36, 00120 Helsinki, is the system administrator ("sysop") of the Helsinki server. Addendum 3 is the registration form of the company. Helsingius knows the anonymous person's real mail address. Helsingius can be reached with telephone from number 400 2605. 5. REQUEST TO PROSECUTE AND DEMAND FOR PUNISHMENT [End of document #5 of 12] The plaintiff respectfully asks, that the police will immediately take all the necessary actions to solve this case and to bring charges. The plaintiff demands for punishment to the person who penetrated the CSI's computer systems, used it illegally and stole the trade secret information as the paragraph 1 dictates. The plaintiff also demands punishment to the crimes mentioned in paragraph 1 for all those persons who participated to the criminal acts in any ways. 6. MISCELLANEOUS A report of an offense has been left to federal police in Los Angeles on 29th January 1995 (Federal Bureau of Investigation) and to the local police in Los Angeles 30th January 1995 (LAPD). The matter is very urgent. Due to the crime the plaintiff has been forced to take broad actions to prevent further criminal actions. It is possible however that the criminal acts are still being made as spreading the stolen information. There has been notable economical losses to the plaintiff from this crime. CHURCH OF SCIENTOLOGY INTERNATIONAL Made: [signature] Jussi Savonen lawyer, Vantaa [End of document #6 of 12] [The following document #7 is of the Helsingius' hearing, written in swedish. I just copy the essential texts, nothing else as it is a form and therefore quite hard to describe as text]. Johan Helsingius thus writes: I am the president of Penetic Oy and Eunet Finland Oy. The computer which is a part of information exchange in the Internet is owned by Penetic. The machine receives messages and forwards them to the Internet. It sends the message to the address specified by the sender, but changes the sender's address into a numeric code. The machine is operational 24 hours per day and daily message feed is about 6.000 messages. I know the urgent matter because I have been contacted by lawyer Jussi Savonen and I have dug the logfiles of the machine, which show that the incident of sending information has occured. I gave the disk containing the information to the police as stated in seizure order. This log information contains the real address of the sender of this anonymous user. I want to point out that the information is only what the sender has given himself to the machine. [Johan Helsingius' signature] [End of document #7 of 12] Printed 06.02.1995 3300/R/105171/95/1 page 1 ORDER OF SEIZURE District: Helsinki PD Investigator: Malmberg Kaj, tel. 189 5425 Crime: Unauthorized use Time of the crime: Sat January 21st 1995 / 12.44 - Mon January 23rd 1995 / 22.07 Scene of the crime: Albertinkatu 17 C 36 ------------------------------------------------------------------------------- Target entity: EUNET FINLAND OY ALBERTINKATU 17 C 36, 00120 HELSINKI Target place: EUNET FINLAND OY'S COMPUTER ------------------------------------------------------------------------------- PROCEDURE INSTRUCTIONS Time: Mon February 6th 1995 Place: Albertinkatu 17 C 36 Instructions: The seizure has to be taken into action as follows: Confiscate the information who has penetrated to the computer of Church of Scientology by using Eunet's computer and/or who has published information to the Internet by using Eunet's computer. Officer: Malberg Kaj, tel. 189 5425 Grounds: The computer can be evidence in the matter of crime. Order: I order the seizure in the beforementioned place. The order is valid Mon January 6th 1995 - for the time being HELSINKI [signature] 06.02.1995 PULKKINEN HARRI OLAVI Captain, tel. 189 5388 [End of document #8 of 12] Printed 08.02.1995 3300/R/105171/95/1 Page 1 RECORD OF THE HOUSE SEARCH Disctrict: Helsinki PD Investigator: Malmberg Kaj, tel. 189 5425 Crime/event: UNAUTHORIZED USE Time: SAT JAN 21st 1995 / 12.44 - MON JAN 23rd 1995 / 22.07 Place: ALBERTINKATU 17 C 36 ------------------------------------------------------------------------------- Target person: HELSINGIUS, JOHAN MIKAEL [personal id witheld] ALBERTINKATU 17 C 36, 00120 HELSINKI EUNET FINLAND OY ALBERTINKATU 17 C 36, 00120 HELSINKI Target place: EVENT TOOK PLACE IN LINTURI KY'S OFFICE ------------------------------------------------------------------------------ INFORMATION: Time: WED JAN 8th 1995 / 12.30 Place: MANNERHEIMINTIE 15 C Path: ORDER PRESENTED WRITTEN Helsingius handed out the wanted information to the police, stored in a disk and the disk was inspected on the spot by the police. The disk was noted to contain log information. Helsingius was heard as a witness and he told these information to be the same as in the report. Order given by: PULKKINEN HARRI OLAVI, CAPTAIN, tel. 189 5388 Execution: MALMBERG KAJ, tel. 189 5425 Witness: KAUPPINEN MATTI JUHANI, tel. 1895161 People present: HELSINGIUS JOHAN GROUNDS: Investigation of a matter that can be significant when solving the crime itself. Executing the seizure. Guarantee the solving of the crime. [End of document #9 of 12] Printed 08.02.1995 3300/R/105171/95/1 Page 2 RECORD OF THE HOUSE SEARCH SUMMARY: I HEREBY CONFIRM THE EXECUTION OF THE HOUSE SEARCH HELSINKI [signature] 08.02.1995 PULKKINEN HARRI OLAVI CAPTAIN, tel. 189 5388 NOTE: DUPLICATION OF THIS RECORD HAS BEEN MADE AS A CERTIFICATE [End of document #10 of 12] ANON.TXT anonlog260195:260195 04:17:57 tc@alumni.caltech.edu (an144108): ping anonlog270195:270195 04:17:34 tc@alumni.caltech.edu (an144108): ping anonlog280195:280195 03:31:54 tc@alumni.caltech.edu (an144108): ping anonlog280195:280195 23:43:52 tc@alumni.caltech.edu (an144108): ping anonlog300195:300195 03:49:36 tc@alumni.caltech.edu (an144108): ping anonlog310195:310195 03:45:55 tc@alumni.caltech.edu (an144108): ping [End of document #11 of 12] PRELIMINARY INVESTIGATION RESULTS ================================= District: HELSINKI PD/RTO R/105171/95 Page 1 Matter: 1. UNAUTHORIZED USE Event time: SAT JAN 21st 1995 / 12.44 - MON JAN 23rd 1995 / 22.07 Place: HELSINKI Plaintiff: CHURCH OF SCIENTOLOGY INTERNATIONAL 6331 HOLLYWOOD BOULEWARD, SUITE 1200, LOS ANGELES CASE: 1 Case results: CASE: 1 FEB 14th 1995 PULKKINEN No crime committed Report of an offense left in Los Angeles, United States and the investigation shows that the crime has been done from the United States. The information from this investigation has been sent to local authorities in Los Angeles. HELSINKI 14.02.1995 [signature] Harri Pulkkinen Leader of the investigation The results of this investigation has been send to - Plaintiff - Person suspected of the crime - Other [End of document #12 of 12] --------------------------------------------------------------------------------- Afterword: There _seems_ to be 13 documents but I only received 12 via fax. I don't think there is anything essential thou, except the addendums I refer (addemdums one and two) in the text. I am not sure if they are in the original papers at all. As mentioned before, I took the liberty to change some dates and times to different format so that the US readers can read this easier. Most of the documents are "as they were" in the originals thou. No charges were brought to mr. Helsingius, I have no idea what has happened to the mystic person mentioned in the anon server logs. At least that account doesn't exist in caltech anymore with name "tc". Typos are mine, syntax errors are mine, Coke was my friend's :-) Merry Xmas folks, Pekka -- :::::::: Pekka.Aakko@Helsinki.FI University of Helsinki :::::::: "I can resist anything but temptation" :::::::::::::::::::::: Department of Computer Science, Teollisuuskatu 23, Helsinki Room A416, Tel (90) 70844204