A Sept. 8 Business article about a phone-records incident at Hewlett-Packard Co. incorrectly said George A. Keyworth II had resigned from the board of directors. After the board asked him to resign, he declined, and the company announced this week that he will not be renominated.
HP Investigators Got Reporters' Phone Records
Friday, September 8, 2006
Hewlett-Packard Co. said yesterday that private investigators it hired to find out who leaked confidential corporate information to the media had accessed private phone records of nine journalists who covered the company, without obtaining their permission.
HP would not disclose the reporters' names or identify their publications. The Wall Street Journal said one of its reporters, Pui-Wing Tam, was alerted by the California attorney general's office that her records may have been disclosed to HP. The New York Times reported that its reporter John Markoff also was a target. Technology news service Cnet reported yesterday that a Cnet reporter, Dawn Kawamoto, was notified that her phone records had been accessed.
"HP is dismayed that the phone records of journalists were accessed without their knowledge, and we are fully cooperating with the attorney general's investigation," Hewlett-Packard spokesman Ryan Donovan said.
California Attorney General Bill Lockyer said yesterday that "people in high positions" at Hewlett-Packard "could be involved in illegal activity."
"Do we think a crime occurred?" Lockyer said. "Yes."
But he said the attorney general's office was still trying to figure out "who did what, when."
Lockyer disclosed this week that he had begun a criminal investigation of methods used by HP's contractor to determine the source of a January leak to the media. The leak involved confidential board discussions about potential acquisitions and other corporate business. George A. Keyworth II, the board member who HP determined had leaked the information, resigned, as did another board member, who protested the methods used to determine the leaker's identity.
Unauthorized access to and use of personal records through computers violates California laws, Lockyer said.
"There's kind of been an admission of guilt by Hewlett-Packard," Lockyer said. He cited the company's disclosures in a filing with the Securities and Exchange Commission that it had obtained personal phone records of its own directors. Those records were obtained by a subcontractor and in some cases involved "pretexting," in which people pose as someone else.
Lockyer said HP's defense has been to say, "Well, we didn't know they were going to do it that way." That means "you have to understand more of who said what to whom, what were the expectations, what was the actual or imputed knowledge -- a lot of things we don't know yet."
Lockyer previously called the breach of phone records "colossally stupid." Yesterday he called the accessing of journalists' phone records "stupid cubed."
Privacy and consumer advocates said the controversy demonstrates the need for comprehensive laws that protect personal information from unauthorized access. The practice of faking identities to obtain personal information is escalating, as is the scope of the records being breached, privacy experts said.