What happened
California Attorney General Bill Lockyer filed criminal charges on 4 October 2006 against former HP chairwoman Patricia Dunn, former HP ethics chief Kevin Hunsaker and three outside investigators. To identify the source of boardroom leaks to the press, investigators obtained the private telephone billing records of 12 people by impersonating them to phone carriers. Personal identifying information for 13 board members, journalists and family members was obtained and used unlawfully. Each defendant faced four felony counts.
How the deception worked
Investigators working for HP called telephone carriers and posed as the account holders, supplying names, phone numbers and Social Security numbers to satisfy the carriers' identity checks and unlock the account. Carrier call center agents, whose job incentives favored resolving customer problems quickly, released detailed billing and call-detail records. Those records were then correlated to link directors and reporters and identify the leak. The lever was ordinary customer service helpfulness combined with weak caller verification, and the extracted action was disclosure of confidential subscriber records.
AI involvement · No AI reported
No AI involvement.
The control that would have caught it· our reading, not a claim from the sources
Carriers needed possession-based caller verification such as a callback to the number of record or an account PIN rather than knowledge of publicly obtainable identifiers; the case directly prompted federal pretexting legislation for phone records.
Sources (1)
This entry summarises public reporting. It is not a legal finding, and details can change as investigations conclude. Found an error? Send a correction.