14 arrests in alleged PayPal attack

WASHINGTON — Fourteen people were arrested Tuesday for allegedly mounting a cyberattack on the website of PayPal in retaliation for its suspending the accounts of WikiLeaks.

Separately, FBI agents executed more than 35 search warrants around the country in an ongoing investigation into coord

inated cyberattacks against major companies and organizations.

As part of the effort, there were two arrests in the United States unrelated to the attack on the PayPal payment service. Overseas, one person was arrested by Scotland Yard in Britain, and there were four arrests by the Dutch Nat

ional Police Agency, all for alleged cybercrimes.

In one case unrelated to PayPal and filed in New Jersey, a customer support contractor was charged with stealing confidential business information on AT&T’s servers. The data was posted on a public file sharing site, and defendant Lance Moore, 21, of Las Cruces, N.M., was accused of exceeding his authorized access to AT&T’s servers in downloading thousands of documents and applications.

According to court papers, the documents the contractor uploaded were the same ones publicized last month by the computer hacking group Lulz Security, or LulzSec, which said it had obtained confidential AT&T documents and made them publicly available on the Internet.

The 16-year-old detained in England is thought to be connected to LulzSec, according to a U.K. official familiar with the investigation. The official spoke on condition that his position not be disclosed because he wasn’t authorized to officially release the information.

A hacker with LulzSec did not immediately return a message seeking comment early Wednesday. The group’s Twitter feed made no mention of any arrests, although “Sabu,” a reputed member of the six-person collective, posted a message to the micro-blogging site saying the hackers couldn’t confirm a report that one their own had been detained.

The cyberattacks on PayPal’s website by the group called Anonymous followed the release by WikiLeaks in November of thousands of classified State Department cables.

Anonymous is a loosely organized group of hackers sympathetic to WikiLeaks. It has claimed responsibility for attacks against corporate and government websites worldwide.

The group also claims credit for disrupting the websites of Visa and MasterCard in December when the credit card companies stopped processing donations to WikiLeaks and its founder, Julian Assange.

A federal indictment unsealed in U.S. District Court in San Jose, Calif., says that Anonymous referred to the cyberattacks on PayPal as “Operation Avenge Assange.”

The 14 charged in the PayPal attack were arrested in Alabama, Arizona, California, Colorado, the District of Columbia, Florida, Massachusetts, Nevada, New Mexico and Ohio.

They ranged in age from 20 to 42. The name and age of one of the 14 was withheld by the court.

The 20-year-old, Mercedes Renee Haefer, is a university student, and her lawyer, Stanley L. Cohen of New York, compared the case to the federal prosecution of former U.S. defense analyst Daniel Ellsberg following his release in 1971 to The New York Times and other newspapers a Pentagon study of government decision-making about the Vietnam War. The government said Haefer is also known as “No” and “MMMM.”

“In the 18th century, people stood on street corners handing out pamphlets saying, ‘Beware the all-powerful military and big government,”‘ Cohen told The Associated Press. “Some people listened. Some people walked away. Today, pamphleteers use the Internet.”

Cohen compared the acts allegedly committed by his client and the others to civil disobedience. “The people being arrested are not being accused of acts of violence,” Cohen said.

In addition to Haefer, the government said those indicted in San Jose were: Christopher Wayne Cooper, 23, also known as “Anthrophobic”; Joshua John Covelli, 26, aka “Absolem” and “Toxic”; Keith Wilson Downey, 26; Donald Husband, 29, aka “Ananon”; Vincent Charles Kershaw, 27, aka “Trivette,” “Triv” and “Reaper”; Ethan Miles, 33; James C. Murphy, 36; Drew Alan Phillips, 26, aka “Drew010”; Jeffrey Puglisi, 28, aka “Jeffer,” “Jefferp” and “Ji”; Daniel Sullivan, 22; Tracy Ann Valenzuela, 42; and Christopher Quang Vo, 22.

In the other non-PayPal case, Scott Matthew Arciszewski, 21, was arrested on charges of intentional damage to a protected computer. Arciszewski made his initial appearance Tuesday in federal court in Orlando, Fla.

According to the complaint, on June 21, 2011, Arciszewski allegedly accessed without authorization the Tampa Bay InfraGard website and uploaded three files, then tweeted about the intrusion and directed visitors to a separate website containing links with instructions on how to exploit the Tampa InfraGard website.

InfraGard is a public-private partnership for critical infrastructure protection sponsored by the FBI, with chapters in all 50 states.

LulzSec, a spin-off group of Anonymous, has taken responsibility for attacks on Fox News and PBS, entertainment companies, including Sony and Nintendo, as well as local chapters of InfraGard and Arizona law enforcement.

The hackers earlier this week broke into The Sun newspaper’s website and posted a bogus story claiming that media tycoon Rupert Murdoch had been found dead.

The group still says it’s sitting on a cache of emails stolen from a server belonging to Murdoch’s British newspaper arm.

——

Associated Press writers Ken Ritter in Las Vegas and Raphael Satter in London contributed to this report.

Talk to us

> Give us your news tips.

> Send us a letter to the editor.

> More Herald contact information.

More in Local News

Edmonds Mayor Mike Rosen goes through an informational slideshow about the current budget situation in Edmonds during a roundtable event at the Edmonds Waterfront Center on Monday, April 7, 2025 in Edmonds, Washington. (Olivia Vanni / The Herald)
Edmonds mayor recommends $19M levy lid lift for November

The city’s biennial budget assumed a $6 million levy lid lift. The final levy amount is up to the City Council.

Community members gather for the dedication of the Oso Landslide Memorial following the ten-year remembrance of the slide on Friday, March 22, 2024, at the Oso Landslide Memorial in Oso, Washington. (Ryan Berry / The Herald)
The Daily Herald garners 6 awards from regional journalism competition

The awards recognize the best in journalism from media outlets across Alaska, Idaho, Montana, Oregon and Washington.

A firefighting helicopter carries a bucket of water from a nearby river to the Bolt Creek Fire on Saturday, Sep. 10, 2022, on U.S. 2 near Index, Washington. (Ryan Berry / The Herald)
How Snohomish County property owners can prepare for wildfire season

Clean your roofs, gutters and flammable material while completing a 5-foot-buffer around your house.

(City of Everett)
Everett’s possible new stadium has a possible price tag

City staff said a stadium could be built for $82 million, lower than previous estimates. Bonds and private investment would pay for most of it.

Jennifer Humelo, right, hugs Art Cass outside of Full Life Care Snohomish County on Wednesday, May 28, 2025 in Everett, Washington. (Olivia Vanni / The Herald)
‘I’ll lose everything’: Snohomish County’s only adult day health center to close

Full Life Care in Everett, which supports adults with disabilities, will shut its doors July 19 due to state funding challenges.

The age of bridge 503 that spans Swamp Creek can be seen in its timber supports and metal pipes on Wednesday, May 15, 2024, in Lynnwood, Washington. The bridge is set to be replaced by the county in 2025. (Ryan Berry / The Herald)
Snohomish County report: 10 bridges set for repairs, replacement

An annual report the county released May 22 details the condition of local bridges and future maintenance they may require.

The Edmonds City Council gathers to discuss annexing into South County Fire on Tuesday, Dec. 3, 2024 in Edmonds, Washington. (Olivia Vanni / The Herald)
Community group presents vision for Edmonds’ fiscal future

Members from Keep Edmonds Vibrant suggested the council focus on revenue generation and a levy lid lift to address its budget crisis.

Traffic moves north and south along I-5 through Everett on Tuesday, Aug. 29, 2023. (Olivia Vanni / The Herald)
Snohomish County saw increase in traffic deaths in 2024

Even though fatalities fell statewide, 64 people died in Snohomish County traffic incidents in 2024, the most in nine years.

Some SnoCo stores see shortages after cyberattack on grocery supplier

Some stores, such as Whole Foods and US Foods CHEF’STORE, informed customers that some items may be temporarily unavailable.

A rainbow LGBTQ+ pride flag hanging from a flag pole outside of Lynnwood City Hall moves in the wind on Tuesday, June 10, 2025, in Lynnwood, Washington. (Olivia Vanni / The Herald)
Lynnwood to develop policy after pride flag controversy

Earlier this month, the city denied a group’s request to raise an LGBTQ+ pride flag at a public park, citing the lack of a clear policy.

The Washington state Capitol on April 18, 2025. (Photo by Jacquelyn Jimenez Romero/Washington State Standard)
Washington governor wants agencies to look for deeper cuts

The state’s financial turmoil hasn’t subsided. It may get worse when a new revenue forecast comes out this month.

Members of the California National Guard and federal law enforcement stand guard as people protest outside of the Edward R. Roybal Federal Building and Metropolitan Detention Center in Los Angeles, on Tuesday. (Philip Cheung/The New York Times)
Ferguson prepares for possibility of Trump deploying troops in Washington

The governor planned to meet with the state’s top military official Tuesday, after the president sent the National Guard and Marines to respond to Los Angeles protests.

Support local journalism

If you value local news, make a gift now to support the trusted journalism you get in The Daily Herald. Donations processed in this system are not tax deductible.