Snowden impersonated NSA officials, sources say
The Guardian via AFP-Getty Images file
A still frame grab recorded on June 6, 2013 and released to AFP on June 10, 2013 shows Edward Snowden, who has been working at the National Security Agency for the past four years, speaking during an interview with The Guardian newspaper at an undisclosed location in Hong Kong.
By Richard Esposito, Matthew Cole and Robert Windrem
NBC News
http://investigations.nbcnews.com/_news/2013/08/29/20234171-snowden-impersonated-nsa-officials-sources-say?lite
Edward Snowden accessed some secret national security documents by assuming the electronic identities of top NSA officials, said intelligence sources.
“Every day, they are learning how brilliant [Snowden] was,” said a former U.S. official with knowledge of the case. “This is why you don’t hire brilliant people for jobs like this. You hire smart people. Brilliant people get you in trouble.”
The NSA still doesn’t know exactly what Snowden took. But its forensic investigation has included trying to figure out which higher level officials Snowden impersonated online to access the most sensitive documents.
The NSA has as many as 40,000 employees. According to one intelligence official, the NSA is restricting its research to a much smaller group of individuals with access to sensitive documents. Investigators are looking for discrepancies between the real world actions of an NSA employee and the online activities linked to that person’s computer user profile. For example, if an employee was on vacation while the on-line version of the employee was downloading a classified document, it might indicate that someone assumed the employee’s identity.
The NSA has already identified several instances where Snowden borrowed someone else’s user profile to access documents, said the official.
Each user profile on NSAnet includes a level of security clearance that determines what files the user can access. Like most NSA employees and contractors, Snowden had a “top secret” security clearance, meaning that under his own user profile he could access many classified documents. But some higher level NSA officials have higher levels of clearance that give them access to the most sensitive documents.
As a system administrator, according to intelligence officials, Snowden had the ability to create and modify user profiles for employees and contractors. He also had the ability to access NSAnet using those user profiles, meaning he could impersonate other users in order to access files. He borrowed the identities of users with higher level security clearances to grab sensitive documents.
Once Snowden had collected documents, his job description also gave him a right forbidden to other NSA employees– the right to download files from his computer to an external storage device. Snowden downloaded a reported 20,000 documents onto thumb drives before leaving Hawaii for Hong Kong on May 20.
Snowden’s documents became the basis for a series of articles in the Guardian and the Washington Post detailing the extent of the U.S. government’s collection of data and metadata on emails and phone calls.
“The damage, on a scale of 1 to 10, is a 12,” said a former intelligence official.
The NSA declined to comment. |
