ALI FBI INFERI-TATEQH CENTERED HEREIN IS 12 31 1995 DATE an Eh 83 23 Elli as FEDERAL BUREAU OF INVESTIGATION Precedence ROUTINE Date 03 23 1998 To FBI HeadquarterS Attn 11887 SSA San Francisco Attn CITA Squa 14B From WFO Squad Contact SA b5 b c 1 Approved By Drafted By I Izwmemwe Case ID Title SOLAR CITA 00 HQ Synopsis Lead set for information requested from Details On 3 23 98 WFO Squad received a telephonic request from DISA ASSIST for information regardin reviously unknown victims of intrusions the hacker Recent news reports have having compromised as many as 400 government computers in United States DISA ASSIST has requested that if such information was obtained by investigators following the recent arrest DISA would like a list of the allegedly compromised military computer systems As it is the responsibility of DISA ASSIST to address such intrusions they are interested in 1 confirming any reported compromises to any U S military computer systems and 2 assisting in repairing any confirmed compromises to those systems DISA ASSIST expressed concerned thatl Imay have shared such information with other hackers since is known to operate with a group of hackers Other hac ers mig exploit the information by attacking vulnerable military computer systems For this reason it is requested that NIPC respond to this request by 04 10 98 Assistance from FBIHQ is requested in addressing this request This is being furnished to San Francisco for information only an J zl g Lf ail I 01% we w - mn To FBI Headquarters From WFO Re 03 23 1998 LEAD S Set Lead 1 FBI HEADQUARTERS AT WASHINGTON DC Request confirm whether investigation has identified large numbers of allegedly compromised computer systems as reported by in public news sources If available WFO requests NIPC to furnish WFO with information b identifying allegedly compromised hosts which are on U S b c military networks WFO will transmit this information to DISA ASSIST enabling them to address this matter by confirming the alleged compromises and repairing those compromised hosts DISA ASSIST is concerned that Imay have shared such information with other hackers who might exploit the information by attacking vulnerable military computer systems For this reason it is requested that NIPC respond to this request by 04 10 98 #6