Jump to content

Maia arson crimew: Difference between revisions

From Wikipedia, the free encyclopedia
Content deleted Content added
Undid revision 1211119076 by Jjffbb (talk): per MoS on caps, as explained in comment above lead paragraph
m v2.05b - Bot T20 CW#61 - Fix errors for CW project (Reference before punctuation)
(10 intermediate revisions by 8 users not shown)
Line 8: Line 8:
| image = maia arson crimew.png
| image = maia arson crimew.png
| caption = A selfie of crimew in 2022
| caption = A selfie of crimew in 2022
| other_names = Tillie Kottmann, deletescape
| other_names = Tillie Kottmann, Deletescape, Tillie crimew
| birth_date = {{Birth date and age|1999|08|07}}
| birth_date = {{Birth date and age|1999|08|07}}
| birth_place = [[Lucerne]], [[Canton of Lucerne]], [[Switzerland]]
| birth_place = [[Lucerne]], [[Canton of Lucerne]], [[Switzerland]]
Line 15: Line 15:
| known_for = [[No Fly List]] leak, source code leaks, [[Verkada#Data breach|Verkada hack]], Lawnchair [[Android (operating system)|Android]] [[Comparison of desktop application launchers|launcher]]
| known_for = [[No Fly List]] leak, source code leaks, [[Verkada#Data breach|Verkada hack]], Lawnchair [[Android (operating system)|Android]] [[Comparison of desktop application launchers|launcher]]
| website = {{URL|https://maia.crimew.gay/}}
| website = {{URL|https://maia.crimew.gay/}}
}}
}}
<!--Per [[MOS:PERSONAL]], the guidance on capitalizing names: "An exception [to capitalizing names as proper nouns] is made when the lowercase variant has received regular and established use in reliable independent sources. In these cases, the name is still capitalized when at the beginning of a sentence, per the normal rules of English." Do not lower-case the subject's name at the beginning of sentences.-->
<!--Per [[MOS:PERSONAL]], the guidance on capitalizing names: "An exception [to capitalizing names as proper nouns] is made when the lowercase variant has received regular and established use in reliable independent sources. In these cases, the name is still capitalized when at the beginning of a sentence, per the normal rules of English." Do not lower-case the subject's name at the beginning of sentences.-->
'''Maia arson crimew'''{{Efn|"Crimew" ({{IPAc-en|'|k|r|aɪ|,|m|j|uː}}) is a [[portmanteau]] of the words ''crime'' and ''[[Meow|mew]]'', as in the [[onomatopoeia]] of a cat's cry.<ref>{{Cite tweet|number=1616836602344480771|user=_nyancrimew|title=for the record, crimew is a portmanteau of crime and mew (as in meow) and is pronounced like cri-mew|author=maia arson crimew|date=January 21, 2023|access-date=January 21, 2023|archive-url=https://web.archive.org/web/20230121205702/https://twitter.com/_nyancrimew/status/1616836602344480771|archive-date=January 21, 2023}}</ref> Crimew stylizes her name in all lowercase.<ref name="crimew">{{Cite tweet|number=1477713772865372161|user=cybertillie|title=some info about my name ("maia arson crimew") and how to stylize it: my name is correctly spelled in all lowercase and i prefer it if people use it like that. i dont *mind* it being capitalized, but all lowercase is more correct :)|author=maia arson crimew|date=January 2, 2022|access-date=January 2, 2022|archive-url=https://web.archive.org/web/20220102185504/https://twitter.com/cybertillie/status/1477713772865372161|archive-date=2022-01-02}}</ref> Crimew describes her pronouns as "[[it (pronoun)|it]](/[[she (pronoun)|she]])": She strongly prefers it/its, especially in informal contexts, and considers it "more maia coded", but is "totally fine" with she/her in more formal contexts, such as in her [[Wikipedia]]<!--[[MOS:SELFREF]]: not "this article"--> article.<ref name="pronounpreference">{{cite web |last1=crimew |first1=maia arson |title=idk if u would know why this is but whys ur wikipedia article use only she/her pronouns for u? they literally say at one point... |url=https://www.tumblr.com/nyancrimew/712792214925869056/idk-if-u-would-know-why-this-is-but-whys-ur |website=[[Tumblr]] |access-date=19 January 2024 |date=19 January 2024}}</ref> For clarity, accessibility, and consistency, this article uses she/her pronouns throughout.|name=name-case-pronouns|group=lower-alpha}} (born August 7, 1999), formerly known as '''Tillie Kottmann''', is a [[Switzerland|Swiss]] [[Software developer|developer]] and [[computer hacker]]. Crimew is known for [[Internet leak|leaking]] source code and other data from companies such as [[Intel]] and [[Nissan]], and for discovering a 2019 copy of the United States government's [[No Fly List]] on an unsecured [[CommuteAir]] server. Crimew was also part of a group that hacked into [[Verkada]] in March 2021 and accessed more than 150,000 cameras. She is also the founding developer of the Lawnchair [[application launcher]] for [[Android (operating system)|Android]].<ref name=":20">{{Cite web |last=Wilde |first=Damien |date=February 22, 2021 |title=Development on Lawnchair Launcher resumes after break |url=https://9to5google.com/2021/02/22/development-on-lawnchair-launcher-resumes-after-an-extended-break/ |url-status=live |access-date=May 23, 2021 |website=[[9to5Google]] |language=en-US |archive-date=May 23, 2021 |archive-url=https://web.archive.org/web/20210523181154/https://9to5google.com/2021/02/22/development-on-lawnchair-launcher-resumes-after-an-extended-break/ }}</ref><ref name=":21">{{Cite web |last=Davenport |first=Corbin |date=February 21, 2021 |title=Lawnchair Launcher resumes development after year-long hiatus |url=https://www.androidpolice.com/2021/02/21/lawnchair-launcher-resumes-development-after-year-long-hiatus/ |url-status=live |access-date=May 23, 2021 |website=Android Police |language=en-US |archive-date=May 23, 2021 |archive-url=https://web.archive.org/web/20210523181154/https://www.androidpolice.com/2021/02/21/lawnchair-launcher-resumes-development-after-year-long-hiatus/ }}</ref>
'''Maia arson crimew'''{{Efn|"Crimew" ({{IPAc-en|'|k|r|aɪ|,|m|j|uː}}) is a [[portmanteau]] of the words ''crime'' and ''[[Meow|mew]]'', as in the [[onomatopoeia]] of a cat's cry.<ref>{{Cite tweet|number=1616836602344480771|user=_nyancrimew|title=for the record, crimew is a portmanteau of crime and mew (as in meow) and is pronounced like cri-mew|author=maia arson crimew|date=January 21, 2023|access-date=January 21, 2023|archive-url=https://web.archive.org/web/20230121205702/https://twitter.com/_nyancrimew/status/1616836602344480771|archive-date=January 21, 2023}}</ref> Crimew stylizes her name in all lowercase.<ref name="crimew">{{Cite tweet|number=1477713772865372161|user=cybertillie|title=some info about my name ("maia arson crimew") and how to stylize it: my name is correctly spelled in all lowercase and i prefer it if people use it like that. i dont *mind* it being capitalized, but all lowercase is more correct :)|author=maia arson crimew|date=January 2, 2022|access-date=January 2, 2022|archive-url=https://web.archive.org/web/20220102185504/https://twitter.com/cybertillie/status/1477713772865372161|archive-date=2022-01-02}}</ref> Crimew describes her pronouns as "[[it (pronoun)|it]](/[[she (pronoun)|she]])": She strongly prefers it/its, especially in informal contexts, and considers it "more maia coded", but is "totally fine" with she/her in more formal contexts, such as in her [[Wikipedia]]<!--[[MOS:SELFREF]]: not "this article"--> article.<ref name="pronounpreference">{{cite web |last1=crimew |first1=maia arson |title=idk if u would know why this is but whys ur wikipedia article use only she/her pronouns for u? they literally say at one point... |url=https://www.tumblr.com/nyancrimew/712792214925869056/idk-if-u-would-know-why-this-is-but-whys-ur |website=[[Tumblr]] |access-date=19 January 2024 |date=19 January 2024}}</ref> For clarity, accessibility, and consistency, this article uses she/her pronouns throughout.|name=name-case-pronouns|group=lower-alpha}} (born August 7, 1999), formerly known as '''Tillie Kottmann''', is a [[Switzerland|Swiss]] [[Software developer|developer]] and [[computer hacker]]. Crimew is known for [[Internet leak|leaking]] source code and other data from companies such as [[Intel]] and [[Nissan]], and for discovering a 2019 copy of the United States government's [[No Fly List]] on an unsecured [[File server|cloud server]] owned by [[CommuteAir]]. Crimew was also part of a group that hacked into [[Verkada]] in March 2021 and accessed more than 150,000 cameras. She is also the founding developer of the Lawnchair [[application launcher]] for [[Android (operating system)|Android]].<ref name=":20">{{Cite web |last=Wilde |first=Damien |date=February 22, 2021 |title=Development on Lawnchair Launcher resumes after break |url=https://9to5google.com/2021/02/22/development-on-lawnchair-launcher-resumes-after-an-extended-break/ |url-status=live |access-date=May 23, 2021 |website=[[9to5Google]] |language=en-US |archive-date=May 23, 2021 |archive-url=https://web.archive.org/web/20210523181154/https://9to5google.com/2021/02/22/development-on-lawnchair-launcher-resumes-after-an-extended-break/ }}</ref><ref name=":21">{{Cite web |last=Davenport |first=Corbin |date=February 21, 2021 |title=Lawnchair Launcher resumes development after year-long hiatus |url=https://www.androidpolice.com/2021/02/21/lawnchair-launcher-resumes-development-after-year-long-hiatus/ |url-status=live |access-date=May 23, 2021 |website=Android Police |language=en-US |archive-date=May 23, 2021 |archive-url=https://web.archive.org/web/20210523181154/https://www.androidpolice.com/2021/02/21/lawnchair-launcher-resumes-development-after-year-long-hiatus/ }}</ref>


In March 2021, crimew was [[indicted]] by a [[Grand juries in the United States|grand jury in the United States]] on [[criminal charge]]s related to her alleged hacking activity between 2019 and 2021. The charges were unrelated to the hack of Verkada. Her home and her parents' home were raided by the Swiss police at the request of United States authorities, and her electronic devices were seized. People used the hashtag "#freetillie" to express support for her in the aftermath of the raid, and the Swiss magazine ''[[Republik]]'' compared her to [[Jeremy Hammond]] and [[Aaron Swartz]].
In March 2021, crimew was [[indicted]] by a [[Grand juries in the United States|grand jury in the United States]] on [[criminal charge]]s related to her alleged hacking activity between 2019 and 2021. The charges were unrelated to the hack of Verkada. Her home and her parents' home were raided by the Swiss police at the request of United States authorities, and her electronic devices were [[Search and seizure|seized]]. People used the hashtag "#freetillie" to express support for her following the raid, and the Swiss magazine ''[[Republik]]'' compared her to [[Jeremy Hammond]] and [[Aaron Swartz]].<ref name=":7" />


==Early life==
==Early life==
Crimew was born on August 7, 1999<ref name=":9">{{Cite web |last=crimew |first=maia arson |date=March 20, 2021 |title=@[email protected] |url=https://notbird.site/@deletescape/105924010757414543 |url-status=live |access-date=March 20, 2021 |website=notbird.site |language=en |quote=i hereby confirm that i was born on august 7th 1999 and that my pronouns are it/its fae/faer she/her they/them. |archive-date=March 24, 2021 |archive-url=https://web.archive.org/web/20210324104740/https://notbird.site/@deletescape/105924010757414543 }}</ref> in the Bruch district of [[Lucerne]] in the German-speaking region of [[Switzerland]].<ref name="APChargesSwissActivist" /><ref name=":10">{{Cite web |date=April 21, 2021 |title=So begründet die Luzerner Hackerin ihre Angriffe auf US-Firmen |trans-title=This is how the Lucerne hacker justifies her attacks on US companies |url=https://www.zentralplus.ch/luzerner-hackerin-drohen-in-den-usa-20-jahre-gefaengnis-2065085/ |url-status=live |access-date=May 25, 2021 |website={{Ill|zentralplus|de}} |language=de-CH |archive-date=May 25, 2021 |archive-url=https://web.archive.org/web/20210525184444/https://www.zentralplus.ch/luzerner-hackerin-drohen-in-den-usa-20-jahre-gefaengnis-2065085/ }}</ref> As a teenager, she worked in [[information technology]].<ref name=":11" /> She was the founding developer of the popular [[Android (operating system)|Android]] [[Comparison of desktop application launchers|launcher]] "Lawnchair", which has been maintained by a different development team since February 2021.<ref name=":20" /><ref name=":21" /> A member of the [[Young Socialists Switzerland]],<ref name=":10" /> crimew was a [[candidate]] for [[Lucerne#Politics|Lucerne City Council]] in 2020.<ref name=":11" />
Crimew was born on August 7, 1999<ref name=":9">{{Cite web |last=crimew |first=maia arson |date=March 20, 2021 |title=@[email protected] |url=https://notbird.site/@deletescape/105924010757414543 |url-status=live |access-date=March 20, 2021 |website=notbird.site |language=en |quote=i hereby confirm that i was born on august 7th 1999 and that my pronouns are it/its fae/faer she/her they/them. |archive-date=March 24, 2021 |archive-url=https://web.archive.org/web/20210324104740/https://notbird.site/@deletescape/105924010757414543 }}</ref> in the Bruch district of [[Lucerne]] in the [[German language|German]]-speaking region of [[Switzerland]].<ref name="APChargesSwissActivist" /><ref name=":10">{{Cite web |date=April 21, 2021 |title=So begründet die Luzerner Hackerin ihre Angriffe auf US-Firmen |trans-title=This is how the Lucerne hacker justifies her attacks on US companies |url=https://www.zentralplus.ch/luzerner-hackerin-drohen-in-den-usa-20-jahre-gefaengnis-2065085/ |url-status=live |access-date=May 25, 2021 |website={{Ill|zentralplus|de}} |language=de-CH |archive-date=May 25, 2021 |archive-url=https://web.archive.org/web/20210525184444/https://www.zentralplus.ch/luzerner-hackerin-drohen-in-den-usa-20-jahre-gefaengnis-2065085/ }}</ref> As a teenager, she worked in [[information technology]].<ref name=":11" /> She was the founding developer of the popular [[Android (operating system)|Android]] [[Comparison of desktop application launchers|launcher]] "Lawnchair", which has been maintained by a different development team since February 2021.<ref name=":20" /><ref name=":21" /> A member of the [[Young Socialists Switzerland]],<ref name=":10" /> crimew was a [[candidate]] for [[Lucerne#Politics|Lucerne City Council]] in 2020.<ref name=":11" />


==Early leaks==
==Early leaks==
In July 2020, crimew posted source code from dozens of companies to a [[GitLab]] repository.<ref name=":14">{{Cite web|last=Ilascu|first=Ionut|date=July 27, 2020|title=Source code from dozens of companies leaked online|url=https://www.bleepingcomputer.com/news/security/source-code-from-dozens-of-companies-leaked-online/|url-status=live|access-date=March 20, 2021|website=[[Bleeping Computer]]|language=en-us|archive-date=March 19, 2021|archive-url=https://web.archive.org/web/20210319115314/https://www.bleepingcomputer.com/news/security/source-code-from-dozens-of-companies-leaked-online/}}</ref> She was credited with originating the [[Nintendo Gigaleak]] by ''[[Bleeping Computer]]'', but she later told ''[[Tom's Guide]]'' that [[Nintendo]] data was not included in the July leak, and that she had never posted Nintendo code to GitLab because the company was "notorious for quick [[Notice and take down|takedowns]]".<ref>{{Cite web|last=Fearn|first=Nicholas|date=July 28, 2020|title=Disney, Microsoft, Nintendo and 50 more hit by massive source code leak [updated]|url=https://www.tomsguide.com/news/companies-source-code-leak|url-status=live|access-date=May 26, 2021|website=[[Tom's Guide]]|language=en|archive-date=July 28, 2020|archive-url=https://web.archive.org/web/20200728075748/https://www.tomsguide.com/news/companies-source-code-leak}}</ref> On August 6, 2020, crimew uploaded more than 20 gigabytes of [[Intel]]'s proprietary data and source code to [[Mega (service)|Mega]].<ref name=":0">{{Cite web|last=Goodin|first=Dan|date=August 6, 2020|title=More than 20GB of Intel source code and proprietary data dumped online|url=https://arstechnica.com/information-technology/2020/08/intel-is-investigating-the-leak-of-20gb-of-its-source-code-and-private-data/|url-status=live|access-date=March 20, 2021|website=[[Ars Technica]]|language=en-us|archive-date=March 18, 2021|archive-url=https://web.archive.org/web/20210318113819/https://arstechnica.com/information-technology/2020/08/intel-is-investigating-the-leak-of-20gb-of-its-source-code-and-private-data/}}</ref> She obtained the data from another hacker who claimed to have [[Data breach|breached]] Intel around May 2020,<ref>{{Cite web|last=Moon|first=M|date=August 7, 2020|title=20GB of Intel internal documents were leaked online|url=https://www.engadget.com/intel-internal-documents-leak-063157088.html|url-status=live|access-date=March 20, 2021|website=[[Engadget]]|language=en-US|archive-date=March 1, 2021|archive-url=https://web.archive.org/web/20210301164940/https://www.engadget.com/intel-internal-documents-leak-063157088.html}}</ref> and described it as a first installment which would be followed by more leaks related to Intel.<ref name=":0" /><ref name=":15">{{Cite web|last=Cimpanu|first=Catalin|date=August 6, 2020|title=Intel investigating breach after 20GB of internal documents leak online|url=https://www.zdnet.com/article/intel-investigating-breach-after-20gb-of-internal-documents-leak-online/|url-status=live|access-date=March 20, 2021|website=[[ZDNet]]|language=en|archive-date=March 19, 2021|archive-url=https://web.archive.org/web/20210319153723/https://www.zdnet.com/article/intel-investigating-breach-after-20gb-of-internal-documents-leak-online/}}</ref> In January 2021, crimew was involved in a source code leak from [[Nissan]], stating that she acquired the leaked code after learning from an anonymous source about a [[Bitbucket]] server<ref>{{Cite web|last=Orzel|first=Eran|date=May 12, 2021|title=Lessons in Securing Development Environments|url=https://securityboulevard.com/2021/05/lessons-in-securing-development-environments/|url-status=live|access-date=May 12, 2021|website=Security Boulevard|language=en-US|archive-date=May 12, 2021|archive-url=https://web.archive.org/web/20210512070346/https://securityboulevard.com/2021/05/lessons-in-securing-development-environments/}}</ref> that was set up with the default username and password.<ref>{{Cite web|last=Cimpanu|first=Catalin|date=January 6, 2021|title=Nissan source code leaked online after Git repo misconfiguration|url=https://www.zdnet.com/article/nissan-source-code-leaked-online-after-git-repo-misconfiguration/|url-status=live|access-date=March 21, 2021|website=[[ZDNet]]|language=en|archive-date=March 19, 2021|archive-url=https://web.archive.org/web/20210319115301/https://www.zdnet.com/article/nissan-source-code-leaked-online-after-git-repo-misconfiguration/}}</ref><ref>{{Cite web|last=Starks|first=Tim|date=January 6, 2021|title=Nissan investigated source code exposure, says it plugged leak|url=https://www.cyberscoop.com/nissan-source-code-leak-exposure-investigation/|url-status=live|access-date=March 21, 2021|website=CyberScoop|language=en|archive-date=March 21, 2021|archive-url=https://web.archive.org/web/20210321153427/https://www.cyberscoop.com/nissan-source-code-leak-exposure-investigation/}}</ref>
In July 2020, crimew posted [[source code]] from dozens of companies to a GitLab [[Repository (version control)|repository]].<ref name=":14">{{Cite web|last=Ilascu|first=Ionut|date=July 27, 2020|title=Source code from dozens of companies leaked online|url=https://www.bleepingcomputer.com/news/security/source-code-from-dozens-of-companies-leaked-online/|url-status=live|access-date=March 20, 2021|website=[[Bleeping Computer]]|language=en-us|archive-date=March 19, 2021|archive-url=https://web.archive.org/web/20210319115314/https://www.bleepingcomputer.com/news/security/source-code-from-dozens-of-companies-leaked-online/}}</ref> She was credited by ''[[Bleeping Computer]]'' with originating the [[Nintendo Gigaleak]], but she later told ''[[Tom's Guide]]'' that [[Nintendo]] data was not included in the July leak, and that she had never posted Nintendo code to [[GitLab]] because the company was "notorious for quick [[Notice and take down|takedowns]]".<ref>{{Cite web|last=Fearn|first=Nicholas|date=July 28, 2020|title=Disney, Microsoft, Nintendo and 50 more hit by massive source code leak [updated]|url=https://www.tomsguide.com/news/companies-source-code-leak|url-status=live|access-date=May 26, 2021|website=[[Tom's Guide]]|language=en|archive-date=July 28, 2020|archive-url=https://web.archive.org/web/20200728075748/https://www.tomsguide.com/news/companies-source-code-leak}}</ref> On August 6, 2020, crimew uploaded more than 20 gigabytes of [[Intel]]'s proprietary data and source code to [[Mega (service)|Mega]].<ref name=":0">{{Cite web|last=Goodin|first=Dan|date=August 6, 2020|title=More than 20GB of Intel source code and proprietary data dumped online|url=https://arstechnica.com/information-technology/2020/08/intel-is-investigating-the-leak-of-20gb-of-its-source-code-and-private-data/|url-status=live|access-date=March 20, 2021|website=[[Ars Technica]]|language=en-us|archive-date=March 18, 2021|archive-url=https://web.archive.org/web/20210318113819/https://arstechnica.com/information-technology/2020/08/intel-is-investigating-the-leak-of-20gb-of-its-source-code-and-private-data/}}</ref> She obtained the data from another hacker who claimed to have [[Data breach|breached]] Intel around May 2020,<ref>{{Cite web|last=Moon|first=M|date=August 7, 2020|title=20GB of Intel internal documents were leaked online|url=https://www.engadget.com/intel-internal-documents-leak-063157088.html|url-status=live|access-date=March 20, 2021|website=[[Engadget]]|language=en-US|archive-date=March 1, 2021|archive-url=https://web.archive.org/web/20210301164940/https://www.engadget.com/intel-internal-documents-leak-063157088.html}}</ref> and described it as a first installment which would be followed by more leaks related to Intel.<ref name=":0" /><ref name=":15">{{Cite web|last=Cimpanu|first=Catalin|date=August 6, 2020|title=Intel investigating breach after 20GB of internal documents leak online|url=https://www.zdnet.com/article/intel-investigating-breach-after-20gb-of-internal-documents-leak-online/|url-status=live|access-date=March 20, 2021|website=[[ZDNet]]|language=en|archive-date=March 19, 2021|archive-url=https://web.archive.org/web/20210319153723/https://www.zdnet.com/article/intel-investigating-breach-after-20gb-of-internal-documents-leak-online/}}</ref> In January 2021, crimew was involved in a source code leak from [[Nissan]], stating that she acquired the leaked code after learning from an anonymous source about a [[Bitbucket]] server<ref>{{Cite web|last=Orzel|first=Eran|date=May 12, 2021|title=Lessons in Securing Development Environments|url=https://securityboulevard.com/2021/05/lessons-in-securing-development-environments/|url-status=live|access-date=May 12, 2021|website=Security Boulevard|language=en-US|archive-date=May 12, 2021|archive-url=https://web.archive.org/web/20210512070346/https://securityboulevard.com/2021/05/lessons-in-securing-development-environments/}}</ref> that was set up with the [[Default password|default username and password]].<ref>{{Cite web|last=Cimpanu|first=Catalin|date=January 6, 2021|title=Nissan source code leaked online after Git repo misconfiguration|url=https://www.zdnet.com/article/nissan-source-code-leaked-online-after-git-repo-misconfiguration/|url-status=live|access-date=March 21, 2021|website=[[ZDNet]]|language=en|archive-date=March 19, 2021|archive-url=https://web.archive.org/web/20210319115301/https://www.zdnet.com/article/nissan-source-code-leaked-online-after-git-repo-misconfiguration/}}</ref><ref>{{Cite web|last=Starks|first=Tim|date=January 6, 2021|title=Nissan investigated source code exposure, says it plugged leak|url=https://www.cyberscoop.com/nissan-source-code-leak-exposure-investigation/|url-status=live|access-date=March 21, 2021|website=CyberScoop|language=en|archive-date=March 21, 2021|archive-url=https://web.archive.org/web/20210321153427/https://www.cyberscoop.com/nissan-source-code-leak-exposure-investigation/}}</ref>


Crimew said in March 2021 that most of her breaches did not require much technical skill.<ref name=":3">{{Cite web|last=Brewster|first=Thomas|title=Swiss Verkada Camera Hacker Says Attacks Were "Easy, Fun Anarchism"—U.S. Files Charges Over Data Theft|url=https://www.forbes.com/sites/thomasbrewster/2021/03/19/swiss-verdaka-camera-hacker-says-attacks-were-easy-fun-anarchism-us-files-charges-over-data-theft/|url-status=live|access-date=March 20, 2021|website=[[Forbes]]|language=en|archive-date=March 20, 2021|archive-url=https://web.archive.org/web/20210320021542/https://www.forbes.com/sites/thomasbrewster/2021/03/19/swiss-verdaka-camera-hacker-says-attacks-were-easy-fun-anarchism-us-files-charges-over-data-theft/}}</ref> In addition to leaking data herself, she maintained a [[Telegram (software)|Telegram channel]] called "ExConfidential"<ref>{{Cite web|date=March 18, 2021|title=Indictment No. CR21-048 RAJ|url=https://www.justice.gov/usao-wdwa/press-release/file/1377536/download|url-status=live|website=[[US Department of Justice|Justice.gov]]|access-date=May 27, 2021|archive-date=April 28, 2021|archive-url=https://web.archive.org/web/20210428001758/https://www.justice.gov/usao-wdwa/press-release/file/1377536/download}}</ref> where she shared details about leaks by others.<ref name=":14" /><ref name=":15" /> In March 2021, [[Distributed Denial of Secrets]] created a [[Torrent file|torrent]] of data from the channel after crimew's home was raided and her devices were seized.<ref>{{Cite web|last=Horne|first=Lorax B.|title=Release: Tillie Kottmann (20 GB)|url=https://ddosecrets.substack.com/p/release-tillie-kottmann-20-gb|url-status=live|access-date=May 27, 2021|website=[[Distributed Denial of Secrets|Distributed Email of Secrets]]|date=March 15, 2021|archive-date=May 18, 2021|archive-url=https://web.archive.org/web/20210518100209/https://ddosecrets.substack.com/p/release-tillie-kottmann-20-gb}}</ref>
Crimew said in March 2021 that most of her breaches did not require much technical skill.<ref name=":3">{{Cite web|last=Brewster|first=Thomas|title=Swiss Verkada Camera Hacker Says Attacks Were "Easy, Fun Anarchism"—U.S. Files Charges Over Data Theft|url=https://www.forbes.com/sites/thomasbrewster/2021/03/19/swiss-verdaka-camera-hacker-says-attacks-were-easy-fun-anarchism-us-files-charges-over-data-theft/|url-status=live|access-date=March 20, 2021|website=[[Forbes]]|language=en|archive-date=March 20, 2021|archive-url=https://web.archive.org/web/20210320021542/https://www.forbes.com/sites/thomasbrewster/2021/03/19/swiss-verdaka-camera-hacker-says-attacks-were-easy-fun-anarchism-us-files-charges-over-data-theft/}}</ref> In addition to leaking data herself, she maintained a [[Telegram (software)|Telegram channel]] called "ExConfidential"<ref>{{Cite web|date=March 18, 2021|title=Indictment No. CR21-048 RAJ|url=https://www.justice.gov/usao-wdwa/press-release/file/1377536/download|url-status=live|website=[[US Department of Justice|Justice.gov]]|access-date=May 27, 2021|archive-date=April 28, 2021|archive-url=https://web.archive.org/web/20210428001758/https://www.justice.gov/usao-wdwa/press-release/file/1377536/download}}</ref> where she shared details about leaks by others.<ref name=":14" /><ref name=":15" /> In March 2021, [[Distributed Denial of Secrets]] created a [[Torrent file|torrent]] of data from the channel after crimew's home was raided and her devices were seized.<ref>{{Cite web|last=Horne|first=Lorax B.|title=Release: Tillie Kottmann (20 GB)|url=https://ddosecrets.substack.com/p/release-tillie-kottmann-20-gb|url-status=live|access-date=May 27, 2021|website=[[Distributed Denial of Secrets|Distributed Email of Secrets]]|date=March 15, 2021|archive-date=May 18, 2021|archive-url=https://web.archive.org/web/20210518100209/https://ddosecrets.substack.com/p/release-tillie-kottmann-20-gb}}</ref>
Line 32: Line 33:
On March 8, 2021, a group of hackers including crimew and calling themselves "[[Advanced persistent threat|APT]]{{Thin space|-}}69420 Arson Cats"<ref>{{Cite news|last1=Bajak|first1=Frank|last2=O'Brien|first2=Matt|date=March 10, 2021|title=Security camera hack exposes hospitals, workplaces, schools|work=[[Seattle Times]]|url=https://www.seattletimes.com/business/security-camera-hack-exposes-hospitals-workplaces-schools/|url-status=live|access-date=March 19, 2021|archive-date=April 10, 2021|archive-url=https://web.archive.org/web/20210410071644/https://www.seattletimes.com/business/security-camera-hack-exposes-hospitals-workplaces-schools/}}</ref><ref>{{Cite news|last=Harwell|first=Drew|date=March 10, 2021|title=Massive camera hack exposes the growing reach and intimacy of American surveillance|url=https://www.washingtonpost.com/technology/2021/03/10/verkada-hack-surveillance-risk/|url-status=live|access-date=April 24, 2021|newspaper=[[The Washington Post]]|archive-date=April 29, 2021|archive-url=https://web.archive.org/web/20210429051804/https://www.washingtonpost.com/technology/2021/03/10/verkada-hack-surveillance-risk/}}</ref> gained "super admin" rights in the network of [[Verkada]], a cloud-based [[Closed-circuit television|security camera]] company,<ref name=":16" /> using credentials they found on the public internet.<ref name=":17" /> The group had access to the network for 36 hours.<ref name=":16">{{Cite web|last1=Patterson |first1=Dan |title=Hack of video security company Verkada exposes footage from 150,000 connected cameras|url=https://www.cbsnews.com/news/verkada-hack-tesla-nissan-equinox-cloudflare/|url-status=live|access-date=March 21, 2021|website=[[CBS News]]|date=March 10, 2021 |language=en-US|archive-date=March 20, 2021|archive-url=https://web.archive.org/web/20210320230144/https://www.cbsnews.com/news/verkada-hack-tesla-nissan-equinox-cloudflare/}}</ref> They collected about 5 gigabytes of data, including live security camera footage and recordings from more than 150,000 cameras in places like a [[Tesla, Inc.|Tesla]] factory, a [[jail]] in [[Alabama]], a [[Halifax Health]] hospital, and residential homes.<ref name="BloombergHackersExpose" /><ref>{{Cite web|last=Goodin|first=Dan|date=March 10, 2021|title=Hackers access security cameras inside Cloudflare, jails, and hospitals|url=https://arstechnica.com/information-technology/2021/03/hackers-access-security-cameras-inside-cloudflare-jails-and-hospitals/|url-status=live|access-date=March 19, 2021|website=[[Ars Technica]]|language=en-us|archive-date=March 18, 2021|archive-url=https://web.archive.org/web/20210318113651/https://arstechnica.com/information-technology/2021/03/hackers-access-security-cameras-inside-cloudflare-jails-and-hospitals/}}</ref> The group also accessed a list of Verkada customers and the company's private financial information,<ref name=":17">{{Cite web|last=Gartenberg|first=Chaim|date=March 9, 2021|title=Security startup Verkada hack exposes 150,000 security cameras in Tesla factories, jails, and more|url=https://www.theverge.com/2021/3/9/22322122/verkada-hack-150000-security-cameras-tesla-factory-cloudflare-jails-hospitals|access-date=March 19, 2021|website=[[The Verge]]|language=en|archive-date=March 19, 2021|archive-url=https://web.archive.org/web/20210319115305/https://www.theverge.com/2021/3/9/22322122/verkada-hack-150000-security-cameras-tesla-factory-cloudflare-jails-hospitals|url-status=live}}</ref> and gained access to the [[corporate network]]s of [[Cloudflare]] and [[Okta, Inc.|Okta]] through their Verkada cameras.<ref name="BloombergHackersExpose" /><ref>{{Cite web|last=Graham-Cumming|first=John|author-link=John Graham-Cumming|date=March 10, 2021|title=About the March 8 & 9, 2021 Verkada camera hack|url=https://blog.cloudflare.com/about-the-march-8-9-2021-verkada-camera-hack/|url-status=live|access-date=March 22, 2021|website=The Cloudflare Blog|publisher=[[Cloudflare]]|language=en|archive-date=March 10, 2021|archive-url=https://web.archive.org/web/20210310231522/https://blog.cloudflare.com/about-the-march-8-9-2021-verkada-camera-hack/}}</ref>
On March 8, 2021, a group of hackers including crimew and calling themselves "[[Advanced persistent threat|APT]]{{Thin space|-}}69420 Arson Cats"<ref>{{Cite news|last1=Bajak|first1=Frank|last2=O'Brien|first2=Matt|date=March 10, 2021|title=Security camera hack exposes hospitals, workplaces, schools|work=[[Seattle Times]]|url=https://www.seattletimes.com/business/security-camera-hack-exposes-hospitals-workplaces-schools/|url-status=live|access-date=March 19, 2021|archive-date=April 10, 2021|archive-url=https://web.archive.org/web/20210410071644/https://www.seattletimes.com/business/security-camera-hack-exposes-hospitals-workplaces-schools/}}</ref><ref>{{Cite news|last=Harwell|first=Drew|date=March 10, 2021|title=Massive camera hack exposes the growing reach and intimacy of American surveillance|url=https://www.washingtonpost.com/technology/2021/03/10/verkada-hack-surveillance-risk/|url-status=live|access-date=April 24, 2021|newspaper=[[The Washington Post]]|archive-date=April 29, 2021|archive-url=https://web.archive.org/web/20210429051804/https://www.washingtonpost.com/technology/2021/03/10/verkada-hack-surveillance-risk/}}</ref> gained "super admin" rights in the network of [[Verkada]], a cloud-based [[Closed-circuit television|security camera]] company,<ref name=":16" /> using credentials they found on the public internet.<ref name=":17" /> The group had access to the network for 36 hours.<ref name=":16">{{Cite web|last1=Patterson |first1=Dan |title=Hack of video security company Verkada exposes footage from 150,000 connected cameras|url=https://www.cbsnews.com/news/verkada-hack-tesla-nissan-equinox-cloudflare/|url-status=live|access-date=March 21, 2021|website=[[CBS News]]|date=March 10, 2021 |language=en-US|archive-date=March 20, 2021|archive-url=https://web.archive.org/web/20210320230144/https://www.cbsnews.com/news/verkada-hack-tesla-nissan-equinox-cloudflare/}}</ref> They collected about 5 gigabytes of data, including live security camera footage and recordings from more than 150,000 cameras in places like a [[Tesla, Inc.|Tesla]] factory, a [[jail]] in [[Alabama]], a [[Halifax Health]] hospital, and residential homes.<ref name="BloombergHackersExpose" /><ref>{{Cite web|last=Goodin|first=Dan|date=March 10, 2021|title=Hackers access security cameras inside Cloudflare, jails, and hospitals|url=https://arstechnica.com/information-technology/2021/03/hackers-access-security-cameras-inside-cloudflare-jails-and-hospitals/|url-status=live|access-date=March 19, 2021|website=[[Ars Technica]]|language=en-us|archive-date=March 18, 2021|archive-url=https://web.archive.org/web/20210318113651/https://arstechnica.com/information-technology/2021/03/hackers-access-security-cameras-inside-cloudflare-jails-and-hospitals/}}</ref> The group also accessed a list of Verkada customers and the company's private financial information,<ref name=":17">{{Cite web|last=Gartenberg|first=Chaim|date=March 9, 2021|title=Security startup Verkada hack exposes 150,000 security cameras in Tesla factories, jails, and more|url=https://www.theverge.com/2021/3/9/22322122/verkada-hack-150000-security-cameras-tesla-factory-cloudflare-jails-hospitals|access-date=March 19, 2021|website=[[The Verge]]|language=en|archive-date=March 19, 2021|archive-url=https://web.archive.org/web/20210319115305/https://www.theverge.com/2021/3/9/22322122/verkada-hack-150000-security-cameras-tesla-factory-cloudflare-jails-hospitals|url-status=live}}</ref> and gained access to the [[corporate network]]s of [[Cloudflare]] and [[Okta, Inc.|Okta]] through their Verkada cameras.<ref name="BloombergHackersExpose" /><ref>{{Cite web|last=Graham-Cumming|first=John|author-link=John Graham-Cumming|date=March 10, 2021|title=About the March 8 & 9, 2021 Verkada camera hack|url=https://blog.cloudflare.com/about-the-march-8-9-2021-verkada-camera-hack/|url-status=live|access-date=March 22, 2021|website=The Cloudflare Blog|publisher=[[Cloudflare]]|language=en|archive-date=March 10, 2021|archive-url=https://web.archive.org/web/20210310231522/https://blog.cloudflare.com/about-the-march-8-9-2021-verkada-camera-hack/}}</ref>


Crimew acted as the [[spokesperson]] for the group of hackers.<ref name=":19">{{Cite web|last=Michel|first=Beat|date=2021-03-19|title=Schweizer Hackerin Tillie Kottmann (21) von US-Justiz angeklagt|trans-title=Swiss hacker Tillie Kottmann (21) charged by the US Justice Department|url=https://www.blick.ch/news/jetzt-wird-es-heikel-fuer-luzerner-computer-hackerin-tillie-kottmann-21-ich-sollte-vielleicht-etwas-paranoider-sein-id16410916.html|url-status=live|access-date=2021-10-28|website=[[Blick]]|language=de-CH|archive-date=October 28, 2021|archive-url=https://web.archive.org/web/20211028045115/https://www.blick.ch/news/jetzt-wird-es-heikel-fuer-luzerner-computer-hackerin-tillie-kottmann-21-ich-sollte-vielleicht-etwas-paranoider-sein-id16410916.html}}</ref> Her [[Twitter]] account was suspended for violating Twitter's [[terms of service]] after she used it to share multiple screenshots of live security camera feeds.<ref name=":4">{{Cite web|last=Murdock|first=Jason|date=March 10, 2021|title=Twitter suspends Verkada hacker Tillie Kottman's account after Tesla security footage leak|url=https://www.newsweek.com/twitter-suspends-verkada-hacker-tillie-kottman-account-security-footage-leak-1575046|url-status=live|access-date=March 21, 2021|website=[[Newsweek]]|language=en|archive-date=March 21, 2021|archive-url=https://web.archive.org/web/20210321024030/https://www.newsweek.com/twitter-suspends-verkada-hacker-tillie-kottman-account-security-footage-leak-1575046}}</ref> During the hack, crimew tweeted "What if we just absolutely ended [[surveillance capitalism]] in two days?"<ref name=":4" /> She contacted a [[Bloomberg News|''Bloomberg'']] journalist shortly after the breach, who in turn contacted Verkada, which removed the hackers' access to the network.<ref name=":5">{{Cite news|last1=Turton|first1=William|last2=Gretler|first2=Corinne|date=March 12, 2021|title=Swiss Police Raid Apartment of Verkada Hacker, Seize Devices|language=en|work=[[Bloomberg News]]|url=https://www.bloomberg.com/news/articles/2021-03-12/swiss-police-raid-apartment-of-verkada-hacker-seize-devices|url-status=live|access-date=March 19, 2021|archive-url=https://web.archive.org/web/20210315192331/https://www.bloomberg.com/news/articles/2021-03-12/swiss-police-raid-apartment-of-verkada-hacker-seize-devices|archive-date=March 15, 2021}}</ref><ref name=":7">{{Cite journal|last=Ryser|first=Daniel|date=April 21, 2021|title=Die Vereinigten Staaten gegen Tillie Kottmann|trans-title=The United States versus Tillie Kottmann|url=https://www.republik.ch/2021/04/21/die-vereinigten-staaten-gegen-tillie-kottmann|url-status=live|access-date=April 24, 2021|journal=[[Republik]]|language=de|archive-date=April 24, 2021|archive-url=https://web.archive.org/web/20210424222834/https://www.republik.ch/2021/04/21/die-vereinigten-staaten-gegen-tillie-kottmann}}</ref><ref>{{Cite web|date=March 10, 2021|title=Firmen weltweit betroffen – Hacker zapfen 150'000 Kameras an – Opfer wurden Tesla, Spitäler und ein Gefängnis|trans-title=Hackers tap into 150,000 cameras – Tesla, hospitals and a prison were victims|url=https://www.tagesanzeiger.ch/hacker-zapfen-150-000-kameras-an-tesla-spital-und-gefaengnis-betroffen-155344967820|url-status=live|access-date=May 26, 2021|website=[[Tages-Anzeiger]]|language=de-CH|archive-date=May 26, 2021|archive-url=https://web.archive.org/web/20210526195936/https://www.tagesanzeiger.ch/hacker-zapfen-150-000-kameras-an-tesla-spital-und-gefaengnis-betroffen-155344967820}}</ref> She told ''Bloomberg'' that the hack exposed "just how broadly we're being surveilled, and how little care is put into at least securing the platforms used to do so, pursuing nothing but profit".<ref name="BloombergHackersExpose" /> An acquaintance of crimew told {{Ill|zentralplus|de}} that they thought she would have carried out the hack for fun regardless of her political views.<ref name=":11">{{Cite web |last1=Berger |first1=Lena |last2=Birnstiel |first2=Claudio |date=March 16, 2021 |title=So tickt die Hackerin aus Luzern, die das FBI mit ihrem Angriff auf Trab hält |trans-title=This is how the hacker from Lucerne, who keeps the FBI busy with her attack, ticks |url=https://www.zentralplus.ch/so-tickt-die-hackerin-aus-luzern-die-das-fbi-mit-ihrem-angriff-auf-trab-haelt-2034325/ |url-status=live |access-date=May 25, 2021 |website={{Ill|zentralplus|de}} |language=de-CH |archive-date=May 25, 2021 |archive-url=https://web.archive.org/web/20210525184443/https://www.zentralplus.ch/so-tickt-die-hackerin-aus-luzern-die-das-fbi-mit-ihrem-angriff-auf-trab-haelt-2034325/ }}</ref>
Crimew acted as the [[spokesperson]] for the group of hackers;<ref name=":19">{{Cite web|last=Michel|first=Beat|date=2021-03-19|title=Schweizer Hackerin Tillie Kottmann (21) von US-Justiz angeklagt|trans-title=Swiss hacker Tillie Kottmann (21) charged by the US Justice Department|url=https://www.blick.ch/news/jetzt-wird-es-heikel-fuer-luzerner-computer-hackerin-tillie-kottmann-21-ich-sollte-vielleicht-etwas-paranoider-sein-id16410916.html|url-status=live|access-date=2021-10-28|website=[[Blick]]|language=de-CH|archive-date=October 28, 2021|archive-url=https://web.archive.org/web/20211028045115/https://www.blick.ch/news/jetzt-wird-es-heikel-fuer-luzerner-computer-hackerin-tillie-kottmann-21-ich-sollte-vielleicht-etwas-paranoider-sein-id16410916.html}}</ref> during the hack, she tweeted "What if we just absolutely ended surveillance capitalism in two days?"<ref name=":4" /> Her [[Twitter]] account was suspended for violating Twitter's [[terms of service]] after she used it to share multiple [[Screenshot|screenshots]] of live security camera feeds.<ref name=":4">{{Cite web|last=Murdock|first=Jason|date=March 10, 2021|title=Twitter suspends Verkada hacker Tillie Kottman's account after Tesla security footage leak|url=https://www.newsweek.com/twitter-suspends-verkada-hacker-tillie-kottman-account-security-footage-leak-1575046|url-status=live|access-date=March 21, 2021|website=[[Newsweek]]|language=en|archive-date=March 21, 2021|archive-url=https://web.archive.org/web/20210321024030/https://www.newsweek.com/twitter-suspends-verkada-hacker-tillie-kottman-account-security-footage-leak-1575046}}</ref> She contacted a [[Bloomberg News|''Bloomberg'']] journalist shortly after the breach, who in turn contacted Verkada, which removed the hackers' access to the network.<ref name=":5">{{Cite news|last1=Turton|first1=William|last2=Gretler|first2=Corinne|date=March 12, 2021|title=Swiss Police Raid Apartment of Verkada Hacker, Seize Devices|language=en|work=[[Bloomberg News]]|url=https://www.bloomberg.com/news/articles/2021-03-12/swiss-police-raid-apartment-of-verkada-hacker-seize-devices|url-status=live|access-date=March 19, 2021|archive-url=https://web.archive.org/web/20210315192331/https://www.bloomberg.com/news/articles/2021-03-12/swiss-police-raid-apartment-of-verkada-hacker-seize-devices|archive-date=March 15, 2021}}</ref><ref name=":7">{{Cite journal|last=Ryser|first=Daniel|date=April 21, 2021|title=Die Vereinigten Staaten gegen Tillie Kottmann|trans-title=The United States versus Tillie Kottmann|url=https://www.republik.ch/2021/04/21/die-vereinigten-staaten-gegen-tillie-kottmann|url-status=live|access-date=April 24, 2021|journal=[[Republik]]|language=de|archive-date=April 24, 2021|archive-url=https://web.archive.org/web/20210424222834/https://www.republik.ch/2021/04/21/die-vereinigten-staaten-gegen-tillie-kottmann}}</ref><ref>{{Cite web|date=March 10, 2021|title=Firmen weltweit betroffen – Hacker zapfen 150'000 Kameras an – Opfer wurden Tesla, Spitäler und ein Gefängnis|trans-title=Hackers tap into 150,000 cameras – Tesla, hospitals and a prison were victims|url=https://www.tagesanzeiger.ch/hacker-zapfen-150-000-kameras-an-tesla-spital-und-gefaengnis-betroffen-155344967820|url-status=live|access-date=May 26, 2021|website=[[Tages-Anzeiger]]|language=de-CH|archive-date=May 26, 2021|archive-url=https://web.archive.org/web/20210526195936/https://www.tagesanzeiger.ch/hacker-zapfen-150-000-kameras-an-tesla-spital-und-gefaengnis-betroffen-155344967820}}</ref> She told ''Bloomberg'' that the hack exposed "just how broadly we're being surveilled, and how little care is put into at least securing the platforms used to do so, pursuing nothing but profit".<ref name="BloombergHackersExpose" /> An acquaintance of crimew told {{Ill|zentralplus|de}} that they thought she would have carried out the hack for fun regardless of her political views.<ref name=":11">{{Cite web |last1=Berger |first1=Lena |last2=Birnstiel |first2=Claudio |date=March 16, 2021 |title=So tickt die Hackerin aus Luzern, die das FBI mit ihrem Angriff auf Trab hält |trans-title=This is how the hacker from Lucerne, who keeps the FBI busy with her attack, ticks |url=https://www.zentralplus.ch/so-tickt-die-hackerin-aus-luzern-die-das-fbi-mit-ihrem-angriff-auf-trab-haelt-2034325/ |url-status=live |access-date=May 25, 2021 |website={{Ill|zentralplus|de}} |language=de-CH |archive-date=May 25, 2021 |archive-url=https://web.archive.org/web/20210525184443/https://www.zentralplus.ch/so-tickt-die-hackerin-aus-luzern-die-das-fbi-mit-ihrem-angriff-auf-trab-haelt-2034325/ }}</ref>


== Indictment ==
== Indictment ==
[[File:FBI_banner_on_gitrip_website.png|thumb|alt=FBI banner on the website git.rip|Banner showing seizure of the git.rip domain by the [[Federal Bureau of Investigation|FBI]]]]
[[File:FBI_banner_on_gitrip_website.png|thumb|alt=FBI banner on the website git.rip|Banner showing seizure of the git.rip domain by the [[Federal Bureau of Investigation|FBI]]]]
In March 2021, crimew was indicted by a [[grand jury]] in the [[United States District Court for the Western District of Washington]] on charges related to several hacks she allegedly carried out between 2019 and 2021.<ref name="APChargesSwissActivist" /><ref name="DoJSwissHacker" /> The twelve-page<ref name=":19" /> indictment alleged that crimew hacked dozens of entities,<ref name=":2">{{Cite news|last1=Schneider|first1=Joe|last2=Turton|first2=William|date=March 19, 2021|title=Verkada Hacker Charged With Wire Fraud, Identity Theft in U.S.|language=en|work=[[Bloomberg News]]|url=https://www.bloomberg.com/news/articles/2021-03-19/verkada-hacker-charged-with-wire-fraud-identity-theft-in-u-s|url-status=live|access-date=March 20, 2021|archive-date=March 19, 2021|archive-url=https://web.archive.org/web/20210319210857/https://www.bloomberg.com/news/articles/2021-03-19/verkada-hacker-charged-with-wire-fraud-identity-theft-in-u-s}}</ref> published proprietary information and code from more than 100 entities including [[Government agency|government agencies]],<ref>{{Cite news|date=March 19, 2021|title=National Digest: Swiss hacker charged with computer intrusion, identity theft in U.S.|newspaper=[[The Washington Post]]|url=https://www.washingtonpost.com/national/national-digest-swiss-hacker-charged-with-computer-intrusion-identity-theft-in-us/2021/03/19/ab04d242-83a7-11eb-9ca6-54e187ee4939_story.html|url-status=live|access-date=March 20, 2021|archive-date=August 24, 2022|archive-url=https://web.archive.org/web/20220824165245/https://www.washingtonpost.com/national/national-digest-swiss-hacker-charged-with-computer-intrusion-identity-theft-in-us/2021/03/19/ab04d242-83a7-11eb-9ca6-54e187ee4939_story.html}}</ref> and sold hacking-related [[Merchandising|merchandise]] such as [[t-shirt]]s.<ref name=":6">{{Cite news|last=Turton|first=William|date=March 19, 2021|title=Swiss Hacker's Indictment Spotlights Ethics of Activist Attacks|language=en|work=[[Bloomberg News]]|url=https://www.bloomberg.com/news/articles/2021-03-19/swiss-hacker-s-indictment-spotlights-ethics-of-activist-attacks|access-date=April 19, 2021|archive-date=April 19, 2021|archive-url=https://web.archive.org/web/20210419232005/https://www.bloomberg.com/news/articles/2021-03-19/swiss-hacker-s-indictment-spotlights-ethics-of-activist-attacks|url-status=live}}</ref> It charged her with counts of [[Computer Fraud and Abuse Act|computer fraud and abuse]], [[Mail and wire fraud|wire fraud]], and [[identity theft]]. The indictment, and a [[Police raid|raid]] by the [[Law enforcement in Switzerland|Swiss police]] in which crimew's electronic devices were seized at the request of United States authorities, came shortly after she claimed involvement in the Verkada hack but did not contain charges related to it.<ref name=":5" /><ref name=":1">{{Cite web|last=Miller|first=Maggie|date=March 19, 2021|title=Justice Department indicts hacker connected to massive surveillance camera breach|url=https://thehill.com/policy/cybersecurity/544063-justice-department-indicts-hacker-connected-to-massive-surveillance|url-status=live|access-date=March 20, 2021|website=[[The Hill (newspaper)|The Hill]]|language=en|archive-date=March 19, 2021|archive-url=https://web.archive.org/web/20210319192931/https://thehill.com/policy/cybersecurity/544063-justice-department-indicts-hacker-connected-to-massive-surveillance}}</ref><ref>{{Cite web|last=Hollister|first=Sean|date=March 12, 2021|title=A hacker who exposed Verkada's surveillance camera snafu has been raided|url=https://www.theverge.com/2021/3/12/22328344/tillie-kottmann-hacker-raid-switzerland-verkada-cameras|url-status=live|access-date=March 19, 2021|website=[[The Verge]]|language=en|archive-date=March 19, 2021|archive-url=https://web.archive.org/web/20210319115310/https://www.theverge.com/2021/3/12/22328344/tillie-kottmann-hacker-raid-switzerland-verkada-cameras}}</ref> Seven police officers searched her home during the raid and fifteen searched the home of her parents.<ref name=":7" /> The website git.rip, through which crimew and others allegedly shared data obtained by hacking, was seized by the [[Federal Bureau of Investigation|FBI]].<ref>{{Cite web|last=|first=|date=March 19, 2021|title=USA klagen Schweizer Hackerin an|trans-title=USA accuses Swiss hacker|url=https://www.spiegel.de/netzwelt/web/tillie-kottmann-fbi-ermittelt-gegen-schweizer-hackerin-a-55778b07-197e-4250-94ea-5c4abe405a10|url-status=live|access-date=April 27, 2021|website=[[Der Spiegel]]|language=de|archive-date=April 23, 2021|archive-url=https://web.archive.org/web/20210423221204/https://www.spiegel.de/netzwelt/web/tillie-kottmann-fbi-ermittelt-gegen-schweizer-hackerin-a-55778b07-197e-4250-94ea-5c4abe405a10}}</ref> She later described this raid as a [[traumatizing]] experience, stating she felt she was "made an example of".<ref name=":22">{{Cite web |last=crimew |first=maia arson |date=May 18, 2023 |title=god im fucked up - but i stay silly :3 |url=https://maia.crimew.gay/posts/god-im-fucked-up/ |access-date=July 10, 2023 |website=maia.crimew.gay}}</ref>
In March 2021, crimew was indicted by a [[grand jury]] in the [[United States District Court for the Western District of Washington]] on charges related to several hacks she allegedly carried out between 2019 and 2021.<ref name="APChargesSwissActivist" /><ref name="DoJSwissHacker" /> The twelve-page<ref name=":19" /> indictment alleged that crimew hacked dozens of entities,<ref name=":2">{{Cite news|last1=Schneider|first1=Joe|last2=Turton|first2=William|date=March 19, 2021|title=Verkada Hacker Charged With Wire Fraud, Identity Theft in U.S.|language=en|work=[[Bloomberg News]]|url=https://www.bloomberg.com/news/articles/2021-03-19/verkada-hacker-charged-with-wire-fraud-identity-theft-in-u-s|url-status=live|access-date=March 20, 2021|archive-date=March 19, 2021|archive-url=https://web.archive.org/web/20210319210857/https://www.bloomberg.com/news/articles/2021-03-19/verkada-hacker-charged-with-wire-fraud-identity-theft-in-u-s}}</ref> published [[Confidential information|proprietary information]] and code from more than 100 entities including [[Government agency|government agencies]],<ref>{{Cite news|date=March 19, 2021|title=National Digest: Swiss hacker charged with computer intrusion, identity theft in U.S.|newspaper=[[The Washington Post]]|url=https://www.washingtonpost.com/national/national-digest-swiss-hacker-charged-with-computer-intrusion-identity-theft-in-us/2021/03/19/ab04d242-83a7-11eb-9ca6-54e187ee4939_story.html|url-status=live|access-date=March 20, 2021|archive-date=August 24, 2022|archive-url=https://web.archive.org/web/20220824165245/https://www.washingtonpost.com/national/national-digest-swiss-hacker-charged-with-computer-intrusion-identity-theft-in-us/2021/03/19/ab04d242-83a7-11eb-9ca6-54e187ee4939_story.html}}</ref> and sold hacking-related [[Merchandising|merchandise]] such as [[t-shirt]]s.<ref name=":6">{{Cite news|last=Turton|first=William|date=March 19, 2021|title=Swiss Hacker's Indictment Spotlights Ethics of Activist Attacks|language=en|work=[[Bloomberg News]]|url=https://www.bloomberg.com/news/articles/2021-03-19/swiss-hacker-s-indictment-spotlights-ethics-of-activist-attacks|access-date=April 19, 2021|archive-date=April 19, 2021|archive-url=https://web.archive.org/web/20210419232005/https://www.bloomberg.com/news/articles/2021-03-19/swiss-hacker-s-indictment-spotlights-ethics-of-activist-attacks|url-status=live}}</ref> It charged her with counts of [[Computer Fraud and Abuse Act|computer fraud and abuse]], [[Mail and wire fraud|wire fraud]], and [[identity theft]]. The indictment, and a [[Police raid|raid]] by the [[Law enforcement in Switzerland|Swiss police]] in which crimew's electronic devices were seized at the request of United States authorities, came shortly after she claimed involvement in the Verkada hack, but did not contain charges related to it.<ref name=":5" /><ref name=":1">{{Cite web|last=Miller|first=Maggie|date=March 19, 2021|title=Justice Department indicts hacker connected to massive surveillance camera breach|url=https://thehill.com/policy/cybersecurity/544063-justice-department-indicts-hacker-connected-to-massive-surveillance|url-status=live|access-date=March 20, 2021|website=[[The Hill (newspaper)|The Hill]]|language=en|archive-date=March 19, 2021|archive-url=https://web.archive.org/web/20210319192931/https://thehill.com/policy/cybersecurity/544063-justice-department-indicts-hacker-connected-to-massive-surveillance}}</ref><ref>{{Cite web|last=Hollister|first=Sean|date=March 12, 2021|title=A hacker who exposed Verkada's surveillance camera snafu has been raided|url=https://www.theverge.com/2021/3/12/22328344/tillie-kottmann-hacker-raid-switzerland-verkada-cameras|url-status=live|access-date=March 19, 2021|website=[[The Verge]]|language=en|archive-date=March 19, 2021|archive-url=https://web.archive.org/web/20210319115310/https://www.theverge.com/2021/3/12/22328344/tillie-kottmann-hacker-raid-switzerland-verkada-cameras}}</ref> Seven police officers searched her home during the raid and fifteen searched the home of her parents.<ref name=":7" /> The website git.rip, through which photos from the hacked Verkada cameras were originally shared,<ref>{{Cite web |date=March 19, 2021 |title=US-Justiz erhebt Anklage gegen Luzerner Verkada-Hackerin Tillie Kottmann |trans-title=US justice files charges against Lucerne camera hacker |url=https://www.blick.ch/schweiz/in-100-firmen-eingedrungen-us-justiz-erhebt-anklage-gegen-luzerner-kamera-hacker-id16408943.html |url-status=live |archive-url=https://web.archive.org/web/20240626212533/https://www.blick.ch/schweiz/in-100-firmen-eingedrungen-us-justiz-erhebt-anklage-gegen-luzerner-kamera-hacker-id16408943.html |archive-date=June 26, 2024 |access-date=June 26, 2024 |publisher=[[Blick]] |language=de-CH}}</ref> was seized by the [[Federal Bureau of Investigation|FBI]].<ref>{{Cite web|last=|first=|date=March 19, 2021|title=USA klagen Schweizer Hackerin an|trans-title=USA accuses Swiss hacker|url=https://www.spiegel.de/netzwelt/web/tillie-kottmann-fbi-ermittelt-gegen-schweizer-hackerin-a-55778b07-197e-4250-94ea-5c4abe405a10|url-status=live|access-date=April 27, 2021|website=[[Der Spiegel]]|language=de|archive-date=April 23, 2021|archive-url=https://web.archive.org/web/20210423221204/https://www.spiegel.de/netzwelt/web/tillie-kottmann-fbi-ermittelt-gegen-schweizer-hackerin-a-55778b07-197e-4250-94ea-5c4abe405a10}}</ref> She later described this raid as a [[traumatizing]] experience, stating she felt she was "made an example of".<ref name=":22">{{Cite web |last=crimew |first=maia arson |date=May 18, 2023 |title=god im fucked up - but i stay silly :3 |url=https://maia.crimew.gay/posts/god-im-fucked-up/ |access-date=July 10, 2023 |website=maia.crimew.gay}}</ref>


As of March 19, 2021, crimew was being represented by lawyer Marcel Bosonnet in Switzerland.<ref name=":2" /><ref>{{Cite web|last=Cameron|first=Dell|title=U.S. Indicts 21-Year-Old Accused of Leaking Stolen Data of Disney, Nintendo, and More|url=https://gizmodo.com/u-s-indicts-21-year-old-accused-of-leaking-stolen-data-1846513986|url-status=live|access-date=March 20, 2021|website=[[Gizmodo]]|date=March 19, 2021|language=en-us|archive-date=March 19, 2021|archive-url=https://web.archive.org/web/20210319190901/https://gizmodo.com/u-s-indicts-21-year-old-accused-of-leaking-stolen-data-1846513986}}</ref> A crowdfunding campaign was created in April 2021 to raise money for her to retain a lawyer in the United States.<ref name=":13">{{Cite web|date=April 3, 2021|title=Unterstützer sammeln Geld für Luzerner Hackerin|trans-title=Supporters collect money for Lucerne hacker|url=https://www.zentralplus.ch/unterstuetzer-sammeln-geld-fuer-luzerner-hackerin-2050527/|url-status=live|access-date=April 24, 2021|website={{Ill|zentralplus|de}}|language=de-CH|archive-date=April 24, 2021|archive-url=https://web.archive.org/web/20210424221149/https://www.zentralplus.ch/unterstuetzer-sammeln-geld-fuer-luzerner-hackerin-2050527/}}</ref>
As of March 19, 2021, crimew was being represented by lawyer Marcel Bosonnet in Switzerland.<ref name=":2" /><ref>{{Cite web|last=Cameron|first=Dell|title=U.S. Indicts 21-Year-Old Accused of Leaking Stolen Data of Disney, Nintendo, and More|url=https://gizmodo.com/u-s-indicts-21-year-old-accused-of-leaking-stolen-data-1846513986|url-status=live|access-date=March 20, 2021|website=[[Gizmodo]]|date=March 19, 2021|language=en-us|archive-date=March 19, 2021|archive-url=https://web.archive.org/web/20210319190901/https://gizmodo.com/u-s-indicts-21-year-old-accused-of-leaking-stolen-data-1846513986}}</ref> A [[crowdfunding campaign]] was created in April 2021 to raise money for her to retain a lawyer in the United States.<ref name=":13">{{Cite web|date=April 3, 2021|title=Unterstützer sammeln Geld für Luzerner Hackerin|trans-title=Supporters collect money for Lucerne hacker|url=https://www.zentralplus.ch/unterstuetzer-sammeln-geld-fuer-luzerner-hackerin-2050527/|url-status=live|access-date=April 24, 2021|website={{Ill|zentralplus|de}}|language=de-CH|archive-date=April 24, 2021|archive-url=https://web.archive.org/web/20210424221149/https://www.zentralplus.ch/unterstuetzer-sammeln-geld-fuer-luzerner-hackerin-2050527/}}</ref>


=== Public response ===
=== Public response ===
People used the [[hashtag]] "#freetillie" to express support for crimew after the raid of her home.<ref name=":11" /><ref name=":12">{{Cite web |date=March 19, 2021 |title=Verkada-Hack: Polizei durchsucht Wohnung von Tillie Kottmann in Luzern |trans-title=Verkada-Hack: Police search Tillie Kottmann's apartment in Lucerne |url=https://www.blick.ch/schweiz/nach-weltweitem-hack-von-ueberwachungskameras-polizei-stuermt-wohnung-von-luzerner-informatiker-id16397207.html |url-status=live |access-date=May 25, 2021 |website=[[Blick]] |language=de-CH |archive-date=May 25, 2021 |archive-url=https://web.archive.org/web/20210525184443/https://www.blick.ch/schweiz/nach-weltweitem-hack-von-ueberwachungskameras-polizei-stuermt-wohnung-von-luzerner-informatiker-id16397207.html }}</ref> Hacking researcher [[Gabriella Coleman]] said that she expected crimew to gain more support in the hacker community as a result of the indictment, stating that the [[Federal government of the United States|United States government]] has been overly aggressive in prosecuting hackers who pursue [[Left-wing politics|leftist]] and [[Anti-authoritarianism|anti-authoritarian]] ideals and that "the hacker community has this in mind".<ref name=":6" /> An article in ''[[Republik]]'' described crimew "in the tradition of hackers like [[Jeremy Hammond]] or [[Aaron Swartz]]."<ref name=":7" /> Hernâni Marques, a board member of the Swiss chapter of [[Chaos Computer Club]], called for "solidarity" with crimew.<ref name=":8">{{Cite web|last=Rosser|first=Angela|date=April 21, 2021|title=Luzerner Hackerin Tillie Kottmann wird von den USA angeklagt|trans-title=Swiss hacker is charged by the USA|url=https://www.20min.ch/story/schweizer-hackerin-wird-von-den-usa-angeklagt-952873969736|url-status=live|access-date=April 27, 2021|website=[[20 Minuten]]|language=de|archive-date=April 27, 2021|archive-url=https://web.archive.org/web/20210427230324/https://www.20min.ch/story/schweizer-hackerin-wird-von-den-usa-angeklagt-952873969736}}</ref> Seattle prosecutors decried this support, with [[Tessa M. Gorman]] stating that "[w]rapping oneself in an allegedly altruistic motive does not remove the criminal stench from such intrusion, theft, and fraud".<ref name=":6" />
People used the [[hashtag]] "#freetillie" to express support for crimew after the raid of her home.<ref name=":11" /><ref name=":12">{{Cite web |date=March 19, 2021 |title=Verkada-Hack: Polizei durchsucht Wohnung von Tillie Kottmann in Luzern |trans-title=Verkada-Hack: Police search Tillie Kottmann's apartment in Lucerne |url=https://www.blick.ch/schweiz/nach-weltweitem-hack-von-ueberwachungskameras-polizei-stuermt-wohnung-von-luzerner-informatiker-id16397207.html |url-status=live |access-date=May 25, 2021 |website=[[Blick]] |language=de-CH |archive-date=May 25, 2021 |archive-url=https://web.archive.org/web/20210525184443/https://www.blick.ch/schweiz/nach-weltweitem-hack-von-ueberwachungskameras-polizei-stuermt-wohnung-von-luzerner-informatiker-id16397207.html }}</ref> Hacking researcher [[Gabriella Coleman]] said that she expected crimew to gain more support in "the [[Hacker culture|hacker community]]" as a result of the indictment, stating that, in some cases, the [[Federal government of the United States|United States government]] has been overly aggressive in prosecuting "hacktivists", who "[pursue] a variety of [[Left-wing politics|leftist]] and [[Anti-authoritarianism|anti-authoritarian]] ideals", and that "the hacker community has this in mind".<ref name=":6" /> An article in ''[[Republik]]'' described crimew as "[following] in the tradition of hackers like [[Jeremy Hammond]] or [[Aaron Swartz]]."<ref name=":7" /> Hernâni Marques, a board member of the Swiss chapter of [[Chaos Computer Club]], called for "solidarity" with crimew.<ref name=":8">{{Cite web|last=Rosser|first=Angela|date=April 21, 2021|title=Luzerner Hackerin Tillie Kottmann wird von den USA angeklagt|trans-title=Swiss hacker is charged by the USA|url=https://www.20min.ch/story/schweizer-hackerin-wird-von-den-usa-angeklagt-952873969736|url-status=live|access-date=April 27, 2021|website=[[20 Minuten]]|language=de|archive-date=April 27, 2021|archive-url=https://web.archive.org/web/20210427230324/https://www.20min.ch/story/schweizer-hackerin-wird-von-den-usa-angeklagt-952873969736}}</ref> Seattle prosecutors rebuked the view that the leak had "any redeeming quality", with U.S. Attorney [[Tessa M. Gorman]] stating that "publishing source code and proprietary and sensitive information on the web is not protected speech — it is [[Data theft|theft]] and [[fraud]]," and that "[w]rapping oneself in an allegedly [[Altruism|altruistic motive]] does not remove the criminal stench from such intrusion, theft, and fraud".<ref name=":6" />


=== Possibility of extradition or trial in Switzerland ===
=== Possibility of extradition or trial in Switzerland ===
After the indictment, a [[United States Department of Justice]] spokesperson told ''[[Blick]]'' that proceedings had been suspended, explaining that the United States would not continue with the case unless crimew was present in the US and defended by a lawyer.<ref name=":19" /> Crimew has expressed confidence that she will not be [[Extradition|extradited]] to the United States.<ref name="APChargesSwissActivist" /> Swiss lawyer Roman Kost stated that Swiss extradition law does not allow extradition of citizens without their consent, but that Swiss hackers "can be tried in Switzerland if there is sufficient suspicion and evidence, and if they are found guilty, they can be punished”.<ref name=":6" /> Switzerland's [[Federal Department of Justice and Police]] confirmed to ''zentralplus'' that it does not extradite Swiss nationals against their will.<ref>{{Cite web|last=Berger|first=Lena|date=March 19, 2021|title=Luzerner Hackerin wird in Amerika angeklagt|trans-title=Lucerne hacker is charged in America|url=https://www.zentralplus.ch/luzerner-hackerin-wird-in-amerika-angeklagt-2038039/|url-status=live|access-date=May 25, 2021|website={{Ill|zentralplus|de}}|language=de-CH|archive-date=May 25, 2021|archive-url=https://web.archive.org/web/20210525184447/https://www.zentralplus.ch/luzerner-hackerin-wird-in-amerika-angeklagt-2038039/}}</ref> Swiss newspaper ''[[Le Temps]]'' reported that crimew would not be extradited and would instead be tried in Switzerland.<ref>{{Cite news|last=Seydtaghia|first=Anouch|date=March 19, 2021|title=Traqué par les Etats-Unis, le hacker suisse risque 20 ans de prison|language=fr-CH|trans-title=Hunted by the United States, the Swiss hacker faces 20 years in prison|work=[[Le Temps]]|url=https://www.letemps.ch/economie/traque-etatsunis-hacker-suisse-risque-20-ans-prison|access-date=May 26, 2021|issn=1423-3967|archive-date=May 26, 2021|archive-url=https://web.archive.org/web/20210526195935/https://www.letemps.ch/economie/traque-etatsunis-hacker-suisse-risque-20-ans-prison|url-status=live}}</ref>
After the indictment, a [[United States Department of Justice]] spokesperson told ''[[Blick]]'' that proceedings had been suspended, explaining that the United States would not continue with the case unless crimew was present in the US and defended by a lawyer.<ref name=":19" /> Crimew has expressed confidence that she will not be [[Extradition|extradited]] to the United States.<ref name="APChargesSwissActivist" /> Swiss lawyer Roman Kost stated that Swiss extradition law does not allow extradition of citizens without their consent, but that Swiss hackers "can be tried in Switzerland if there is sufficient suspicion and evidence, and if they are found guilty, they can be punished”.<ref name=":6" /> Switzerland's [[Federal Department of Justice and Police]] confirmed to ''zentralplus'' that it does not extradite Swiss nationals against their will.<ref>{{Cite web|last=Berger|first=Lena|date=March 19, 2021|title=Luzerner Hackerin wird in Amerika angeklagt|trans-title=Lucerne hacker is charged in America|url=https://www.zentralplus.ch/luzerner-hackerin-wird-in-amerika-angeklagt-2038039/|url-status=live|access-date=May 25, 2021|website={{Ill|zentralplus|de}}|language=de-CH|archive-date=May 25, 2021|archive-url=https://web.archive.org/web/20210525184447/https://www.zentralplus.ch/luzerner-hackerin-wird-in-amerika-angeklagt-2038039/}}</ref> Swiss newspaper ''[[Le Temps]]'' reported that crimew would not be extradited and would instead be tried in Switzerland.<ref>{{Cite news|last=Seydtaghia|first=Anouch|date=March 19, 2021|title=Traqué par les Etats-Unis, le hacker suisse risque 20 ans de prison|language=fr-CH|trans-title=Hunted by the United States, the Swiss hacker faces 20 years in prison|work=[[Le Temps]]|url=https://www.letemps.ch/economie/traque-etatsunis-hacker-suisse-risque-20-ans-prison|access-date=May 26, 2021|issn=1423-3967|archive-date=May 26, 2021|archive-url=https://web.archive.org/web/20210526195935/https://www.letemps.ch/economie/traque-etatsunis-hacker-suisse-risque-20-ans-prison|url-status=live}}</ref>


''[[20 Minuten]]'' reported that if crimew was tried in Switzerland, she would face a maximum of four and a half years in prison.<ref name=":8" /> Hernâni Marques said that "much of what [she] did would not be punishable in Switzerland," pointing out that much of the data crimew leaked was publicly available on the internet and arguing that the hack of Verkada was "legitimate and useful for society" because of the privacy issue it exposed.<ref name=":7" /> In March 2021, ''Blick'' reported that a potential warrant for crimew's arrest issued by the United States would likely be executed by all countries that share a border with Switzerland.<ref name=":19" /> In September 2021, crimew told ''null41'' that she was certain she would never be able to travel to certain countries again, and that even if she was able to travel in the future it would be risky because of the possibility of extradition from other countries. She noted that unlike [[Julian Assange]], she was not relying on the goodwill of a country because the Swiss constitution prohibits her extradition.<ref name=":18">{{Cite web |last1=Schulthess |first1=Anja Nora |last2=Muffler |first2=Robyn |date=2021-09-06 |title=Die Luzerner Hackerin Tillie Kottmann im Interview |trans-title=An interview with Lucerne hacker Tillie Kottmann |url=https://www.null41.ch/blog/die-luzerner-hackerin-tillie-kottmann-im-interview |url-status=live |access-date=2021-10-05 |website=[[041 - Das Kulturmagazin]] |language=de |archive-date=October 5, 2021 |archive-url=https://web.archive.org/web/20211005221448/https://www.null41.ch/blog/die-luzerner-hackerin-tillie-kottmann-im-interview }}</ref> In October 2021, ''[[Zeit Magazin]]'' reported that while [[Interpol]] does not publicize most of its investigations, it was likely that an international arrest warrant had been issued for crimew, which would potentially render her unable to leave Switzerland.<ref>{{Cite web|last=Rusch|first=Marlon|date=October 20, 2021|title=Hackerin Tillie Kottmann: Tillie gegen die Vereinigten Staaten|trans-title=Hacker Tillie Kottmann: Tillie versus the United States|url=https://www.zeit.de/zustimmung?url=https%3A%2F%2Fwww.zeit.de%2Fzeit-magazin%2F2021%2F43%2Fhackerin-tillie-kottmann-usa-justizministerium-klage-aktivismus-schweiz|url-status=live|access-date=2021-10-28|website=[[Zeit Magazin]]|language=de-CH|archive-date=October 28, 2021|archive-url=https://web.archive.org/web/20211028043742/https://www.zeit.de/zustimmung?url=https%3A%2F%2Fwww.zeit.de%2Fzeit-magazin%2F2021%2F43%2Fhackerin-tillie-kottmann-usa-justizministerium-klage-aktivismus-schweiz}}</ref>
''[[20 Minuten]]'' reported that if crimew was tried in Switzerland, she would face a maximum of four and a half years in prison.<ref name=":8" /> Hernâni Marques said that "much of what [she] did would not be punishable in Switzerland," additionally stating that much of the data crimew leaked was publicly available on the internet and arguing that the hack of Verkada was "legitimate and useful for society" because of the privacy issue it exposed.<ref name=":7" /> In March 2021, ''Blick'' reported that a potential [[Arrest warrant|warrant]] for crimew's arrest issued by the United States would likely be executed by all countries that share a border with Switzerland.<ref name=":19" /> In September 2021, crimew told ''null41'' that she was certain she would never be able to travel to certain countries again, and that even if she was able to travel in the future, it would be risky because of the possibility of extradition from other countries. She noted that, unlike [[Julian Assange]], she was not relying on the goodwill of a country, because the Swiss constitution prohibits her extradition.<ref name=":18">{{Cite web |last1=Schulthess |first1=Anja Nora |last2=Muffler |first2=Robyn |date=2021-09-06 |title=Die Luzerner Hackerin Tillie Kottmann im Interview |trans-title=An interview with Lucerne hacker Tillie Kottmann |url=https://www.null41.ch/blog/die-luzerner-hackerin-tillie-kottmann-im-interview |url-status=live |access-date=2021-10-05 |website=[[041 - Das Kulturmagazin]] |language=de |archive-date=October 5, 2021 |archive-url=https://web.archive.org/web/20211005221448/https://www.null41.ch/blog/die-luzerner-hackerin-tillie-kottmann-im-interview }}</ref> In October 2021, ''[[Zeit Magazin]]'' reported that, while [[Interpol]] does not publicize most of its investigations, it was likely that an international arrest warrant had been issued for crimew, which would potentially render her unable to leave Switzerland.<ref>{{Cite web|last=Rusch|first=Marlon|date=October 20, 2021|title=Hackerin Tillie Kottmann: Tillie gegen die Vereinigten Staaten|trans-title=Hacker Tillie Kottmann: Tillie versus the United States|url=https://www.zeit.de/zustimmung?url=https%3A%2F%2Fwww.zeit.de%2Fzeit-magazin%2F2021%2F43%2Fhackerin-tillie-kottmann-usa-justizministerium-klage-aktivismus-schweiz|url-status=live|access-date=2021-10-28|website=[[Zeit Magazin]]|language=de-CH|archive-date=October 28, 2021|archive-url=https://web.archive.org/web/20211028043742/https://www.zeit.de/zustimmung?url=https%3A%2F%2Fwww.zeit.de%2Fzeit-magazin%2F2021%2F43%2Fhackerin-tillie-kottmann-usa-justizministerium-klage-aktivismus-schweiz}}</ref>


==Later works==
==Later work==


=== Feelyou ===
=== Feelyou ===
In July 2022, crimew discovered and reported a vulnerability in the mental health app Feelyou, which exposed the email addresses of its nearly 80,000 users and allowed anyone to connect supposedly anonymous posts to the email addresses of the users who posted them.<ref>{{Cite web |last=Thalen |first=Mikael |date=July 18, 2022 |title=Anonymous mental health app Feelyou accidentally exposed 70,000 personal emails |url=https://www.dailydot.com/debug/feelyou-mental-health-app-data-leak/ |access-date=July 20, 2022 |website=[[The Daily Dot]] |language=en-US |archive-date=July 20, 2022 |archive-url=https://web.archive.org/web/20220720050056/https://www.dailydot.com/debug/feelyou-mental-health-app-data-leak/ |url-status=live }}</ref>
In July 2022, crimew discovered and reported a [[Vulnerability (computing)|vulnerability]] in the [[mental health]] app Feelyou, which exposed the [[Email address|email addresses]] of its nearly 80,000 users and allowed anyone to connect supposedly anonymous posts to the email addresses of the users who posted them.<ref>{{Cite web |last=Thalen |first=Mikael |date=July 18, 2022 |title=Anonymous mental health app Feelyou accidentally exposed 70,000 personal emails |url=https://www.dailydot.com/debug/feelyou-mental-health-app-data-leak/ |access-date=July 20, 2022 |website=[[The Daily Dot]] |language=en-US |archive-date=July 20, 2022 |archive-url=https://web.archive.org/web/20220720050056/https://www.dailydot.com/debug/feelyou-mental-health-app-data-leak/ |url-status=live }}</ref>

===No Fly and Selectee Lists leak===
{{See also|No Fly List#2023 leak}}
On January 19, 2023, crimew reported that she had gained access to 2019 versions of the US government's [[No Fly List]] of 1.56 million entries and [[Selectee List]] of 250,000 entries hosted by [[CommuteAir]] on an unsecured [[Amazon Web Services]] cloud server.<ref>{{cite web |last1=arson crimew |first1=Maia |title=how to completely own an airline in 3 easy steps |url=https://maia.crimew.gay/posts/how-to-hack-an-airline/ |website=maia.crimew.gay |publisher=maia arson crimew |access-date=21 January 2023 |language=en |date=19 January 2023 |archive-date=January 21, 2023 |archive-url=https://web.archive.org/web/20230121181330/https://maia.crimew.gay/posts/how-to-hack-an-airline/ |url-status=live }}</ref><ref>{{cite news |last1=DeGeurin |first1=Mack |title=Hacker Reportedly Gets Hands on Massive No-Fly List of Alleged Terrorist Suspects |url=https://gizmodo.com/hacker-no-fly-list-terrorist-airlines-1850013192 |access-date=21 January 2023 |agency=Gizmodo |date=20 January 2023 |archive-date=January 21, 2023 |archive-url=https://web.archive.org/web/20230121182902/https://gizmodo.com/hacker-no-fly-list-terrorist-airlines-1850013192 |url-status=live }}</ref><ref name="papersplease">{{cite web|last1=Hasbrouck |first1=Edward |title=The #NoFly list is a #MuslimBan list |url=https://papersplease.org/wp/2023/01/20/the-nofly-list-is-a-muslimban-list/ |website=PapersPlease.org |publisher=The Identity Project |access-date=20 January 2023 |archive-date=January 21, 2023 |archive-url=https://web.archive.org/web/20230121200831/https://papersplease.org/wp/2023/01/20/the-nofly-list-is-a-muslimban-list/ |url-status=live }}</ref> Crimew noted that, despite the size of the [[Terrorist Screening Database|Terrorism Screening Database]], there were "very clear trends towards almost exclusively Arabic and Russian sounding names throughout the million entries";<ref>{{cite web |last1=Thalen |first1=Mikael |last2=Covucci |first2=David |title=EXCLUSIVE: U.S. airline accidentally exposes 'No Fly List' on unsecured server |url=https://www.dailydot.com/debug/no-fly-list-us-tsa-unprotected-server-commuteair/ |website=The Daily Dot |publisher=maia arson crimew |access-date=31 January 2023 |language=en |date=19 January 2023 |archive-date=January 31, 2023 |archive-url=https://web.archive.org/web/20230131103744/https://www.dailydot.com/debug/no-fly-list-us-tsa-unprotected-server-commuteair/ |url-status=live }}</ref> over 10% of the listed entries contained "[[Muhammad (name)|Muhammad]]" in either the first or last name fields.<ref name="papersplease"/>


===No Fly and Selectee Lists hack===
=== Musical work ===
Crimew describes herself as a [[musician]] and [[Disc jockey|DJ]];<ref>{{Cite web |title=maia arson crimew (@nyancrimew) |url=https://www.instagram.com/nyancrimew/ |access-date=2024-06-23 |website=[[Instagram]]}}</ref> she has performed on releases from [[Musical collective|music collectives]] involved in the [[hyperpop]] scene such as Sleepy.zone and Goop House,<ref>{{Cite web |title=nyancrimew - kitten dreams, by sleepy.zone |url=https://sleepyzone.bandcamp.com/track/nyancrimew-kitten-dreams |access-date=2024-06-23 |website=sleepy.zone |language=en}}</ref><ref>{{Citation |title=annieversary, nyancrimew - WE SPAWNED THE GOOPACABRA IN MINECRAFT AT 3AM |work=[[SoundCloud]] |url=https://soundcloud.com/goophouse/annieversary-nyancrimew-we |access-date=2024-06-24 |language=en}}</ref> with the former listing her as a current member as of June 2024.<ref>{{Cite web |title=sleepy zone |url=https://sleepy.zone/ |access-date=2024-06-23 |website=sleepy.zone}}</ref> She has also [[self-released]] tracks on [[SoundCloud]].<ref>{{Cite web |title=nyancrimew |url=https://soundcloud.com/nyancrimew |access-date=2024-06-24 |website=SoundCloud |language=en}}</ref>
On January 19, 2023, crimew reported that she had gained access to 2019 versions of the US government's [[No Fly List]] of 1.56 million entries and Selectee List of 250,000 entries posted by [[CommuteAir]] on an unsecured Amazon Web Services cloud server.<ref>{{cite web |last1=arson crimew |first1=Maia |title=how to completely own an airline in 3 easy steps |url=https://maia.crimew.gay/posts/how-to-hack-an-airline/ |website=maia.crimew.gay |publisher=maia arson crimew |access-date=21 January 2023 |language=en |date=19 January 2023 |archive-date=January 21, 2023 |archive-url=https://web.archive.org/web/20230121181330/https://maia.crimew.gay/posts/how-to-hack-an-airline/ |url-status=live }}</ref><ref>{{cite news |last1=Reid |first1=Channing |title=Hacker Gets Access To The FBI's No Fly List |url=https://simpleflying.com/hacker-acess-fbi-no-fly-list/ |access-date=21 January 2023 |agency=Simple Flying |date=20 January 2023 |archive-date=January 21, 2023 |archive-url=https://web.archive.org/web/20230121060514/https://simpleflying.com/hacker-acess-fbi-no-fly-list/ |url-status=live }}</ref><ref>{{cite news |last1=DeGeurin |first1=Mack |title=Hacker Reportedly Gets Hands on Massive No-Fly List of Alleged Terrorist Suspects |url=https://gizmodo.com/hacker-no-fly-list-terrorist-airlines-1850013192 |access-date=21 January 2023 |agency=Gizmodo |date=20 January 2023 |archive-date=January 21, 2023 |archive-url=https://web.archive.org/web/20230121182902/https://gizmodo.com/hacker-no-fly-list-terrorist-airlines-1850013192 |url-status=live }}</ref><ref name="papersplease">{{cite web|last1=Hasbrouck |first1=Edward |title=The #NoFly list is a #MuslimBan list |url=https://papersplease.org/wp/2023/01/20/the-nofly-list-is-a-muslimban-list/ |website=PapersPlease.org |publisher=The Identity Project |access-date=20 January 2023 |archive-date=January 21, 2023 |archive-url=https://web.archive.org/web/20230121200831/https://papersplease.org/wp/2023/01/20/the-nofly-list-is-a-muslimban-list/ |url-status=live }}</ref> Crimew noted that "it's just crazy to me how big that Terrorism Screening Database is and yet there is still very clear trends towards almost exclusively Arabic and Russian sounding names throughout the million entries";<ref>{{cite web |last1=Thalen |first1=Mikael |last2=Covucci |first2=David |title=EXCLUSIVE: U.S. airline accidentally exposes 'No Fly List' on unsecured server |url=https://www.dailydot.com/debug/no-fly-list-us-tsa-unprotected-server-commuteair/ |website=The Daily Dot |publisher=maia arson crimew |access-date=31 January 2023 |language=en |date=19 January 2023 |archive-date=January 31, 2023 |archive-url=https://web.archive.org/web/20230131103744/https://www.dailydot.com/debug/no-fly-list-us-tsa-unprotected-server-commuteair/ |url-status=live }}</ref> over 10% of the listed entries contained "Muhammad" in either the first or last name fields.<ref name="papersplease"/>


== Personal life and beliefs ==
== Personal life and beliefs ==
Crimew lives in Switzerland.<ref name="APChargesSwissActivist" /> She is [[Non-binary gender|non-binary]]<ref name=":13" /> and uses [[It (pronoun)|it/its]] and [[She (pronoun)|she/her]] pronouns,<ref name="pronouns">{{Cite web |last=crimew |first=maia arson |title=maia :3 |url=https://maia.crimew.gay/ |archive-url=https://web.archive.org/web/20220430195206/https://maia.crimew.gay/ |archive-date=April 30, 2022 |access-date=May 23, 2022 |website=maia.crimew.gay|url-status=live}}</ref> with a strong preference for it/its.<ref name="pronounpreference" /> She is [[autistic]]<ref name="akkoma profile">{{Cite web |title=maia: (@[email protected]) |url=https://crimew.gay/users/maia |access-date=2023-07-10 |website=crimew.gay |language=en}}</ref> and identifies as both [[bisexual]] and a [[lesbian]].<ref>{{cite web |last1=crimew |first1=maia arson |title=also like the fact that they keep telling me identifying as a bi lesbian is (somehow, allegedly) resulting in real life violence against lesbians but as soon as i point out theyre trying to get me killed discourse doesnt affect anyone materially anymore |url=https://tumblr.crimew.gay/post/707392151895588864/also-like-the-fact-that-they-keep-telling-me |website=[[Tumblr]] |access-date=2 October 2023 |date=24 January 2023}}</ref> She is a member of the [[Young Socialists Switzerland]],<ref name=":10" /> and has run for political candidacy on socialist platforms.<ref name=":11" /><ref name=":12" /> Crimew has cited curiosity,<ref name=":11" /> [[anti-capitalism]], [[anarchism]], and opposition to the concept of [[intellectual property]] as the motives for her hacking,<ref>{{Cite web |last=Vincent |first=James |date=March 19, 2021 |title='Anti-capitalist' Verkada hacker charged by US government with attacks on dozens of companies |url=https://www.theverge.com/2021/3/19/22339625/tillie-kottmann-swiss-hacker-verkada-charged-us-government-verkada |access-date=March 19, 2021 |website=[[The Verge]] |archive-date=March 19, 2021 |archive-url=https://web.archive.org/web/20210319111805/https://www.theverge.com/2021/3/19/22339625/tillie-kottmann-swiss-hacker-verkada-charged-us-government-verkada |url-status=live }}</ref><ref>{{Cite news |last=Menn |first=Joseph |author-link=Joseph Menn |date=March 26, 2021 |title=New wave of 'hacktivism' adds twist to cybersecurity woes |language=en |work=[[Reuters]] |url=https://www.reuters.com/article/us-cyber-hacktivism-focus-idUSKBN2BH3HJ |access-date=March 27, 2021 |archive-date=March 27, 2021 |archive-url=https://web.archive.org/web/20210327164842/https://www.reuters.com/article/us-cyber-hacktivism-focus-idUSKBN2BH3HJ |url-status=live }}</ref> stating that "caring about literally nothing but profit definitely doesn't result in security".<ref name=":3" /> She has additionally stated that she believes [[source code]] and [[documentation]] should be public, and that she thinks of herself as a [[Hacktivism|hacktivist]].<ref name=":18" /> Crimew has stated that being [[queer]] and experiencing discrimination contributed to the development of her political views.<ref>{{Cite web |last=Fabian |first=Vogt |date=April 21, 2021 |title=USA wollen sie dingfest machen: Jetzt redet die meistgesuchte Hackerin der Schweiz |trans-title=USA want to arrest them: Now the most wanted hacker in Switzerland is talking |url=https://www.blick.ch/schweiz/usa-wollen-sie-dingfest-machen-jetzt-redet-die-meistgesuchte-hackerin-der-schweiz-id16474327.html |url-status=live |access-date=May 25, 2021 |website=[[Blick]] |language=de-CH |archive-date=May 25, 2021 |archive-url=https://web.archive.org/web/20210525185451/https://www.blick.ch/schweiz/usa-wollen-sie-dingfest-machen-jetzt-redet-die-meistgesuchte-hackerin-der-schweiz-id16474327.html }}</ref><ref name=":13" />
Crimew lives in Switzerland.<ref name="APChargesSwissActivist" /> She is [[Non-binary gender|non-binary]]<ref name=":13" /> and uses [[It (pronoun)|it/its]] and [[She (pronoun)|she/her]] pronouns,<ref name="pronouns">{{Cite web |last=crimew |first=maia arson |title=maia :3 |url=https://maia.crimew.gay/ |archive-url=https://web.archive.org/web/20220430195206/https://maia.crimew.gay/ |archive-date=April 30, 2022 |access-date=May 23, 2022 |website=maia.crimew.gay|url-status=live}}</ref> with a strong preference for it/its.<ref name="pronounpreference" /> She is [[autistic]]<ref name="akkoma profile">{{Cite web |title=maia: (@[email protected]) |url=https://crimew.gay/users/maia |access-date=2023-07-10 |website=crimew.gay |language=en}}</ref> and identifies as both [[bisexual]] and a [[lesbian]].<ref>{{cite web |last1=crimew |first1=maia arson |title=also like the fact that they keep telling me identifying as a bi lesbian is (somehow, allegedly) resulting in real life violence against lesbians but as soon as i point out theyre trying to get me killed discourse doesnt affect anyone materially anymore |url=https://tumblr.crimew.gay/post/707392151895588864/also-like-the-fact-that-they-keep-telling-me |website=[[Tumblr]] |access-date=2 October 2023 |date=24 January 2023}}</ref> She is a member of the [[Young Socialists Switzerland]],<ref name=":10" /> and has run for political candidacy on [[Socialism|socialist]] platforms.<ref name=":11" /><ref name=":12" /> Crimew has cited curiosity,<ref name=":11" /> [[anti-capitalism]], [[anarchism]], and opposition to the concept of [[intellectual property]] as motives for her hacking,<ref>{{Cite web |last=Vincent |first=James |date=March 19, 2021 |title='Anti-capitalist' Verkada hacker charged by US government with attacks on dozens of companies |url=https://www.theverge.com/2021/3/19/22339625/tillie-kottmann-swiss-hacker-verkada-charged-us-government-verkada |access-date=March 19, 2021 |website=[[The Verge]] |archive-date=March 19, 2021 |archive-url=https://web.archive.org/web/20210319111805/https://www.theverge.com/2021/3/19/22339625/tillie-kottmann-swiss-hacker-verkada-charged-us-government-verkada |url-status=live }}</ref><ref>{{Cite news |last=Menn |first=Joseph |author-link=Joseph Menn |date=March 26, 2021 |title=New wave of 'hacktivism' adds twist to cybersecurity woes |language=en |work=[[Reuters]] |url=https://www.reuters.com/article/us-cyber-hacktivism-focus-idUSKBN2BH3HJ |access-date=March 27, 2021 |archive-date=March 27, 2021 |archive-url=https://web.archive.org/web/20210327164842/https://www.reuters.com/article/us-cyber-hacktivism-focus-idUSKBN2BH3HJ |url-status=live }}</ref> stating that "caring about literally nothing but profit definitely doesn't result in security".<ref name=":3" /> She has additionally stated that she believes [[source code]] and [[documentation]] should be public, and that she thinks of herself as a [[Hacktivism|hacktivist]].<ref name=":18" /> Crimew has stated that being [[queer]] and experiencing [[discrimination]] contributed to the development of her political views.<ref>{{Cite web |last=Fabian |first=Vogt |date=April 21, 2021 |title=USA wollen sie dingfest machen: Jetzt redet die meistgesuchte Hackerin der Schweiz |trans-title=USA want to arrest them: Now the most wanted hacker in Switzerland is talking |url=https://www.blick.ch/schweiz/usa-wollen-sie-dingfest-machen-jetzt-redet-die-meistgesuchte-hackerin-der-schweiz-id16474327.html |url-status=live |access-date=May 25, 2021 |website=[[Blick]] |language=de-CH |archive-date=May 25, 2021 |archive-url=https://web.archive.org/web/20210525185451/https://www.blick.ch/schweiz/usa-wollen-sie-dingfest-machen-jetzt-redet-die-meistgesuchte-hackerin-der-schweiz-id16474327.html }}</ref><ref name=":13" />


Crimew has also been known as Tillie Kottman, deletescape, and tillie crimew.<ref name="DoJSwissHacker" /> In 2022, she legally changed her name to maia arson crimew, which is stylized in [[all lowercase]].<ref>{{Cite tweet|number=1526550551751806977|user=_nyancrimew|title=i am now legally maia arson|author=maia arson crimew|date=May 17, 2022|access-date=2022-06-01|archive-url=https://web.archive.org/web/20220601132412/https://twitter.com/_nyancrimew/status/1526550551751806977|archive-date=June 1, 2022|url-status=dead|link=no}}</ref>
Crimew has also been known as Tillie Kottmann, "deletescape", and "tillie crimew".<ref name="DoJSwissHacker" /> In 2022, she [[Name change|legally changed her name]] to maia arson crimew, which is stylized in [[all lowercase]].<ref>{{Cite tweet|number=1526550551751806977|user=_nyancrimew|title=i am now legally maia arson|author=maia arson crimew|date=May 17, 2022|access-date=2022-06-01|archive-url=https://web.archive.org/web/20220601132412/https://twitter.com/_nyancrimew/status/1526550551751806977|archive-date=June 1, 2022|url-status=dead|link=no}}</ref>


== Notes ==
== Notes ==
Line 81: Line 86:
[[Category:21st-century Swiss LGBT people]]
[[Category:21st-century Swiss LGBT people]]
[[Category:21st-century Swiss people]]
[[Category:21st-century Swiss people]]
[[Category:Bisexual non-binary people]]
[[Category:Non-binary bisexual people]]
[[Category:Fugitives wanted by the United States]]
[[Category:Fugitives wanted by the United States]]
[[Category:Hackers]]
[[Category:Hackers]]
Line 89: Line 94:
[[Category:People charged with identity theft]]
[[Category:People charged with identity theft]]
[[Category:People charged with wire fraud]]
[[Category:People charged with wire fraud]]
[[Category:People on the autism spectrum]]
[[Category:Autistic LGBT people]]
[[Category:Swiss anarchists]]
[[Category:Swiss anarchists]]
[[Category:Swiss anti-capitalists]]
[[Category:Swiss anti-capitalists]]
Line 97: Line 102:
[[Category:Swiss non-binary people]]
[[Category:Swiss non-binary people]]
[[Category:Swiss transgender people]]
[[Category:Swiss transgender people]]
[[Category:Swiss non-binary musicians]]
[[Category:Swiss transgender musicians]]
[[Category:Transgender bisexual people]]
[[Category:Transgender bisexual people]]
[[Category:Transgender lesbians]]
[[Category:Transgender lesbians]]
[[Category:Transgender non-binary people]]
[[Category:Transgender non-binary people]]
[[Category:LGBT DJs]]

Revision as of 06:02, 28 June 2024

maia arson crimew
A selfie of crimew in 2022
Born (1999-08-07) August 7, 1999 (age 25)
NationalitySwiss
Other namesTillie Kottmann, Deletescape, Tillie crimew
Occupation(s)Software developer, computer hacker
Known forNo Fly List leak, source code leaks, Verkada hack, Lawnchair Android launcher
Websitemaia.crimew.gay

Maia arson crimew[a] (born August 7, 1999), formerly known as Tillie Kottmann, is a Swiss developer and computer hacker. Crimew is known for leaking source code and other data from companies such as Intel and Nissan, and for discovering a 2019 copy of the United States government's No Fly List on an unsecured cloud server owned by CommuteAir. Crimew was also part of a group that hacked into Verkada in March 2021 and accessed more than 150,000 cameras. She is also the founding developer of the Lawnchair application launcher for Android.[4][5]

In March 2021, crimew was indicted by a grand jury in the United States on criminal charges related to her alleged hacking activity between 2019 and 2021. The charges were unrelated to the hack of Verkada. Her home and her parents' home were raided by the Swiss police at the request of United States authorities, and her electronic devices were seized. People used the hashtag "#freetillie" to express support for her following the raid, and the Swiss magazine Republik compared her to Jeremy Hammond and Aaron Swartz.[6]

Early life

Crimew was born on August 7, 1999[7] in the Bruch district of Lucerne in the German-speaking region of Switzerland.[8][9] As a teenager, she worked in information technology.[10] She was the founding developer of the popular Android launcher "Lawnchair", which has been maintained by a different development team since February 2021.[4][5] A member of the Young Socialists Switzerland,[9] crimew was a candidate for Lucerne City Council in 2020.[10]

Early leaks

In July 2020, crimew posted source code from dozens of companies to a GitLab repository.[11] She was credited by Bleeping Computer with originating the Nintendo Gigaleak, but she later told Tom's Guide that Nintendo data was not included in the July leak, and that she had never posted Nintendo code to GitLab because the company was "notorious for quick takedowns".[12] On August 6, 2020, crimew uploaded more than 20 gigabytes of Intel's proprietary data and source code to Mega.[13] She obtained the data from another hacker who claimed to have breached Intel around May 2020,[14] and described it as a first installment which would be followed by more leaks related to Intel.[13][15] In January 2021, crimew was involved in a source code leak from Nissan, stating that she acquired the leaked code after learning from an anonymous source about a Bitbucket server[16] that was set up with the default username and password.[17][18]

Crimew said in March 2021 that most of her breaches did not require much technical skill.[19] In addition to leaking data herself, she maintained a Telegram channel called "ExConfidential"[20] where she shared details about leaks by others.[11][15] In March 2021, Distributed Denial of Secrets created a torrent of data from the channel after crimew's home was raided and her devices were seized.[21]

Verkada hack

On March 8, 2021, a group of hackers including crimew and calling themselves "APT - 69420 Arson Cats"[22][23] gained "super admin" rights in the network of Verkada, a cloud-based security camera company,[24] using credentials they found on the public internet.[25] The group had access to the network for 36 hours.[24] They collected about 5 gigabytes of data, including live security camera footage and recordings from more than 150,000 cameras in places like a Tesla factory, a jail in Alabama, a Halifax Health hospital, and residential homes.[26][27] The group also accessed a list of Verkada customers and the company's private financial information,[25] and gained access to the corporate networks of Cloudflare and Okta through their Verkada cameras.[26][28]

Crimew acted as the spokesperson for the group of hackers;[29] during the hack, she tweeted "What if we just absolutely ended surveillance capitalism in two days?"[30] Her Twitter account was suspended for violating Twitter's terms of service after she used it to share multiple screenshots of live security camera feeds.[30] She contacted a Bloomberg journalist shortly after the breach, who in turn contacted Verkada, which removed the hackers' access to the network.[31][6][32] She told Bloomberg that the hack exposed "just how broadly we're being surveilled, and how little care is put into at least securing the platforms used to do so, pursuing nothing but profit".[26] An acquaintance of crimew told zentralplus [de] that they thought she would have carried out the hack for fun regardless of her political views.[10]

Indictment

FBI banner on the website git.rip
Banner showing seizure of the git.rip domain by the FBI

In March 2021, crimew was indicted by a grand jury in the United States District Court for the Western District of Washington on charges related to several hacks she allegedly carried out between 2019 and 2021.[8][33] The twelve-page[29] indictment alleged that crimew hacked dozens of entities,[34] published proprietary information and code from more than 100 entities including government agencies,[35] and sold hacking-related merchandise such as t-shirts.[36] It charged her with counts of computer fraud and abuse, wire fraud, and identity theft. The indictment, and a raid by the Swiss police in which crimew's electronic devices were seized at the request of United States authorities, came shortly after she claimed involvement in the Verkada hack, but did not contain charges related to it.[31][37][38] Seven police officers searched her home during the raid and fifteen searched the home of her parents.[6] The website git.rip, through which photos from the hacked Verkada cameras were originally shared,[39] was seized by the FBI.[40] She later described this raid as a traumatizing experience, stating she felt she was "made an example of".[41]

As of March 19, 2021, crimew was being represented by lawyer Marcel Bosonnet in Switzerland.[34][42] A crowdfunding campaign was created in April 2021 to raise money for her to retain a lawyer in the United States.[43]

Public response

People used the hashtag "#freetillie" to express support for crimew after the raid of her home.[10][44] Hacking researcher Gabriella Coleman said that she expected crimew to gain more support in "the hacker community" as a result of the indictment, stating that, in some cases, the United States government has been overly aggressive in prosecuting "hacktivists", who "[pursue] a variety of leftist and anti-authoritarian ideals", and that "the hacker community has this in mind".[36] An article in Republik described crimew as "[following] in the tradition of hackers like Jeremy Hammond or Aaron Swartz."[6] Hernâni Marques, a board member of the Swiss chapter of Chaos Computer Club, called for "solidarity" with crimew.[45] Seattle prosecutors rebuked the view that the leak had "any redeeming quality", with U.S. Attorney Tessa M. Gorman stating that "publishing source code and proprietary and sensitive information on the web is not protected speech — it is theft and fraud," and that "[w]rapping oneself in an allegedly altruistic motive does not remove the criminal stench from such intrusion, theft, and fraud".[36]

Possibility of extradition or trial in Switzerland

After the indictment, a United States Department of Justice spokesperson told Blick that proceedings had been suspended, explaining that the United States would not continue with the case unless crimew was present in the US and defended by a lawyer.[29] Crimew has expressed confidence that she will not be extradited to the United States.[8] Swiss lawyer Roman Kost stated that Swiss extradition law does not allow extradition of citizens without their consent, but that Swiss hackers "can be tried in Switzerland if there is sufficient suspicion and evidence, and if they are found guilty, they can be punished”.[36] Switzerland's Federal Department of Justice and Police confirmed to zentralplus that it does not extradite Swiss nationals against their will.[46] Swiss newspaper Le Temps reported that crimew would not be extradited and would instead be tried in Switzerland.[47]

20 Minuten reported that if crimew was tried in Switzerland, she would face a maximum of four and a half years in prison.[45] Hernâni Marques said that "much of what [she] did would not be punishable in Switzerland," additionally stating that much of the data crimew leaked was publicly available on the internet and arguing that the hack of Verkada was "legitimate and useful for society" because of the privacy issue it exposed.[6] In March 2021, Blick reported that a potential warrant for crimew's arrest issued by the United States would likely be executed by all countries that share a border with Switzerland.[29] In September 2021, crimew told null41 that she was certain she would never be able to travel to certain countries again, and that even if she was able to travel in the future, it would be risky because of the possibility of extradition from other countries. She noted that, unlike Julian Assange, she was not relying on the goodwill of a country, because the Swiss constitution prohibits her extradition.[48] In October 2021, Zeit Magazin reported that, while Interpol does not publicize most of its investigations, it was likely that an international arrest warrant had been issued for crimew, which would potentially render her unable to leave Switzerland.[49]

Later work

Feelyou

In July 2022, crimew discovered and reported a vulnerability in the mental health app Feelyou, which exposed the email addresses of its nearly 80,000 users and allowed anyone to connect supposedly anonymous posts to the email addresses of the users who posted them.[50]

No Fly and Selectee Lists leak

On January 19, 2023, crimew reported that she had gained access to 2019 versions of the US government's No Fly List of 1.56 million entries and Selectee List of 250,000 entries hosted by CommuteAir on an unsecured Amazon Web Services cloud server.[51][52][53] Crimew noted that, despite the size of the Terrorism Screening Database, there were "very clear trends towards almost exclusively Arabic and Russian sounding names throughout the million entries";[54] over 10% of the listed entries contained "Muhammad" in either the first or last name fields.[53]

Musical work

Crimew describes herself as a musician and DJ;[55] she has performed on releases from music collectives involved in the hyperpop scene such as Sleepy.zone and Goop House,[56][57] with the former listing her as a current member as of June 2024.[58] She has also self-released tracks on SoundCloud.[59]

Personal life and beliefs

Crimew lives in Switzerland.[8] She is non-binary[43] and uses it/its and she/her pronouns,[60] with a strong preference for it/its.[3] She is autistic[61] and identifies as both bisexual and a lesbian.[62] She is a member of the Young Socialists Switzerland,[9] and has run for political candidacy on socialist platforms.[10][44] Crimew has cited curiosity,[10] anti-capitalism, anarchism, and opposition to the concept of intellectual property as motives for her hacking,[63][64] stating that "caring about literally nothing but profit definitely doesn't result in security".[19] She has additionally stated that she believes source code and documentation should be public, and that she thinks of herself as a hacktivist.[48] Crimew has stated that being queer and experiencing discrimination contributed to the development of her political views.[65][43]

Crimew has also been known as Tillie Kottmann, "deletescape", and "tillie crimew".[33] In 2022, she legally changed her name to maia arson crimew, which is stylized in all lowercase.[66]

Notes

  1. ^ "Crimew" (/ˈkrˌmj/) is a portmanteau of the words crime and mew, as in the onomatopoeia of a cat's cry.[1] Crimew stylizes her name in all lowercase.[2] Crimew describes her pronouns as "it(/she)": She strongly prefers it/its, especially in informal contexts, and considers it "more maia coded", but is "totally fine" with she/her in more formal contexts, such as in her Wikipedia article.[3] For clarity, accessibility, and consistency, this article uses she/her pronouns throughout.

References

  1. ^ maia arson crimew [@_nyancrimew] (January 21, 2023). "for the record, crimew is a portmanteau of crime and mew (as in meow) and is pronounced like cri-mew" (Tweet). Archived from the original on January 21, 2023. Retrieved January 21, 2023 – via Twitter.
  2. ^ maia arson crimew [@cybertillie] (January 2, 2022). "some info about my name ("maia arson crimew") and how to stylize it: my name is correctly spelled in all lowercase and i prefer it if people use it like that. i dont *mind* it being capitalized, but all lowercase is more correct :)" (Tweet). Archived from the original on January 2, 2022. Retrieved January 2, 2022 – via Twitter.
  3. ^ a b crimew, maia arson (January 19, 2024). "idk if u would know why this is but whys ur wikipedia article use only she/her pronouns for u? they literally say at one point..." Tumblr. Retrieved January 19, 2024.
  4. ^ a b Wilde, Damien (February 22, 2021). "Development on Lawnchair Launcher resumes after break". 9to5Google. Archived from the original on May 23, 2021. Retrieved May 23, 2021.
  5. ^ a b Davenport, Corbin (February 21, 2021). "Lawnchair Launcher resumes development after year-long hiatus". Android Police. Archived from the original on May 23, 2021. Retrieved May 23, 2021.
  6. ^ a b c d e Ryser, Daniel (April 21, 2021). "Die Vereinigten Staaten gegen Tillie Kottmann" [The United States versus Tillie Kottmann]. Republik (in German). Archived from the original on April 24, 2021. Retrieved April 24, 2021.
  7. ^ crimew, maia arson (March 20, 2021). "@[email protected]". notbird.site. Archived from the original on March 24, 2021. Retrieved March 20, 2021. i hereby confirm that i was born on august 7th 1999 and that my pronouns are it/its fae/faer she/her they/them.
  8. ^ a b c d O'Brien, Matt (March 19, 2021). "U.S. charges Swiss 'hacktivist' for data theft and leaks". Associated Press. Archived from the original on March 19, 2021. Retrieved March 19, 2021.
  9. ^ a b c "So begründet die Luzerner Hackerin ihre Angriffe auf US-Firmen" [This is how the Lucerne hacker justifies her attacks on US companies]. zentralplus [de] (in Swiss High German). April 21, 2021. Archived from the original on May 25, 2021. Retrieved May 25, 2021.
  10. ^ a b c d e f Berger, Lena; Birnstiel, Claudio (March 16, 2021). "So tickt die Hackerin aus Luzern, die das FBI mit ihrem Angriff auf Trab hält" [This is how the hacker from Lucerne, who keeps the FBI busy with her attack, ticks]. zentralplus [de] (in Swiss High German). Archived from the original on May 25, 2021. Retrieved May 25, 2021.
  11. ^ a b Ilascu, Ionut (July 27, 2020). "Source code from dozens of companies leaked online". Bleeping Computer. Archived from the original on March 19, 2021. Retrieved March 20, 2021.
  12. ^ Fearn, Nicholas (July 28, 2020). "Disney, Microsoft, Nintendo and 50 more hit by massive source code leak [updated]". Tom's Guide. Archived from the original on July 28, 2020. Retrieved May 26, 2021.
  13. ^ a b Goodin, Dan (August 6, 2020). "More than 20GB of Intel source code and proprietary data dumped online". Ars Technica. Archived from the original on March 18, 2021. Retrieved March 20, 2021.
  14. ^ Moon, M (August 7, 2020). "20GB of Intel internal documents were leaked online". Engadget. Archived from the original on March 1, 2021. Retrieved March 20, 2021.
  15. ^ a b Cimpanu, Catalin (August 6, 2020). "Intel investigating breach after 20GB of internal documents leak online". ZDNet. Archived from the original on March 19, 2021. Retrieved March 20, 2021.
  16. ^ Orzel, Eran (May 12, 2021). "Lessons in Securing Development Environments". Security Boulevard. Archived from the original on May 12, 2021. Retrieved May 12, 2021.
  17. ^ Cimpanu, Catalin (January 6, 2021). "Nissan source code leaked online after Git repo misconfiguration". ZDNet. Archived from the original on March 19, 2021. Retrieved March 21, 2021.
  18. ^ Starks, Tim (January 6, 2021). "Nissan investigated source code exposure, says it plugged leak". CyberScoop. Archived from the original on March 21, 2021. Retrieved March 21, 2021.
  19. ^ a b Brewster, Thomas. "Swiss Verkada Camera Hacker Says Attacks Were "Easy, Fun Anarchism"—U.S. Files Charges Over Data Theft". Forbes. Archived from the original on March 20, 2021. Retrieved March 20, 2021.
  20. ^ "Indictment No. CR21-048 RAJ". Justice.gov. March 18, 2021. Archived from the original on April 28, 2021. Retrieved May 27, 2021.
  21. ^ Horne, Lorax B. (March 15, 2021). "Release: Tillie Kottmann (20 GB)". Distributed Email of Secrets. Archived from the original on May 18, 2021. Retrieved May 27, 2021.
  22. ^ Bajak, Frank; O'Brien, Matt (March 10, 2021). "Security camera hack exposes hospitals, workplaces, schools". Seattle Times. Archived from the original on April 10, 2021. Retrieved March 19, 2021.
  23. ^ Harwell, Drew (March 10, 2021). "Massive camera hack exposes the growing reach and intimacy of American surveillance". The Washington Post. Archived from the original on April 29, 2021. Retrieved April 24, 2021.
  24. ^ a b Patterson, Dan (March 10, 2021). "Hack of video security company Verkada exposes footage from 150,000 connected cameras". CBS News. Archived from the original on March 20, 2021. Retrieved March 21, 2021.
  25. ^ a b Gartenberg, Chaim (March 9, 2021). "Security startup Verkada hack exposes 150,000 security cameras in Tesla factories, jails, and more". The Verge. Archived from the original on March 19, 2021. Retrieved March 19, 2021.
  26. ^ a b c Turton, William (March 9, 2021). "Hackers Breach Thousands of Security Cameras, Exposing Tesla, Jails, Hospitals". Bloomberg News. Archived from the original on March 19, 2021. Retrieved March 19, 2021.
  27. ^ Goodin, Dan (March 10, 2021). "Hackers access security cameras inside Cloudflare, jails, and hospitals". Ars Technica. Archived from the original on March 18, 2021. Retrieved March 19, 2021.
  28. ^ Graham-Cumming, John (March 10, 2021). "About the March 8 & 9, 2021 Verkada camera hack". The Cloudflare Blog. Cloudflare. Archived from the original on March 10, 2021. Retrieved March 22, 2021.
  29. ^ a b c d Michel, Beat (March 19, 2021). "Schweizer Hackerin Tillie Kottmann (21) von US-Justiz angeklagt" [Swiss hacker Tillie Kottmann (21) charged by the US Justice Department]. Blick (in Swiss High German). Archived from the original on October 28, 2021. Retrieved October 28, 2021.
  30. ^ a b Murdock, Jason (March 10, 2021). "Twitter suspends Verkada hacker Tillie Kottman's account after Tesla security footage leak". Newsweek. Archived from the original on March 21, 2021. Retrieved March 21, 2021.
  31. ^ a b Turton, William; Gretler, Corinne (March 12, 2021). "Swiss Police Raid Apartment of Verkada Hacker, Seize Devices". Bloomberg News. Archived from the original on March 15, 2021. Retrieved March 19, 2021.
  32. ^ "Firmen weltweit betroffen – Hacker zapfen 150'000 Kameras an – Opfer wurden Tesla, Spitäler und ein Gefängnis" [Hackers tap into 150,000 cameras – Tesla, hospitals and a prison were victims]. Tages-Anzeiger (in Swiss High German). March 10, 2021. Archived from the original on May 26, 2021. Retrieved May 26, 2021.
  33. ^ a b "Swiss Hacker indicted for conspiracy, wire fraud, and aggravated identity theft". Justice.gov. March 18, 2021. Archived from the original on March 18, 2021. Retrieved March 19, 2021.
  34. ^ a b Schneider, Joe; Turton, William (March 19, 2021). "Verkada Hacker Charged With Wire Fraud, Identity Theft in U.S." Bloomberg News. Archived from the original on March 19, 2021. Retrieved March 20, 2021.
  35. ^ "National Digest: Swiss hacker charged with computer intrusion, identity theft in U.S." The Washington Post. March 19, 2021. Archived from the original on August 24, 2022. Retrieved March 20, 2021.
  36. ^ a b c d Turton, William (March 19, 2021). "Swiss Hacker's Indictment Spotlights Ethics of Activist Attacks". Bloomberg News. Archived from the original on April 19, 2021. Retrieved April 19, 2021.
  37. ^ Miller, Maggie (March 19, 2021). "Justice Department indicts hacker connected to massive surveillance camera breach". The Hill. Archived from the original on March 19, 2021. Retrieved March 20, 2021.
  38. ^ Hollister, Sean (March 12, 2021). "A hacker who exposed Verkada's surveillance camera snafu has been raided". The Verge. Archived from the original on March 19, 2021. Retrieved March 19, 2021.
  39. ^ "US-Justiz erhebt Anklage gegen Luzerner Verkada-Hackerin Tillie Kottmann" [US justice files charges against Lucerne camera hacker] (in Swiss High German). Blick. March 19, 2021. Archived from the original on June 26, 2024. Retrieved June 26, 2024.
  40. ^ "USA klagen Schweizer Hackerin an" [USA accuses Swiss hacker]. Der Spiegel (in German). March 19, 2021. Archived from the original on April 23, 2021. Retrieved April 27, 2021.
  41. ^ crimew, maia arson (May 18, 2023). "god im fucked up - but i stay silly :3". maia.crimew.gay. Retrieved July 10, 2023.
  42. ^ Cameron, Dell (March 19, 2021). "U.S. Indicts 21-Year-Old Accused of Leaking Stolen Data of Disney, Nintendo, and More". Gizmodo. Archived from the original on March 19, 2021. Retrieved March 20, 2021.
  43. ^ a b c "Unterstützer sammeln Geld für Luzerner Hackerin" [Supporters collect money for Lucerne hacker]. zentralplus [de] (in Swiss High German). April 3, 2021. Archived from the original on April 24, 2021. Retrieved April 24, 2021.
  44. ^ a b "Verkada-Hack: Polizei durchsucht Wohnung von Tillie Kottmann in Luzern" [Verkada-Hack: Police search Tillie Kottmann's apartment in Lucerne]. Blick (in Swiss High German). March 19, 2021. Archived from the original on May 25, 2021. Retrieved May 25, 2021.
  45. ^ a b Rosser, Angela (April 21, 2021). "Luzerner Hackerin Tillie Kottmann wird von den USA angeklagt" [Swiss hacker is charged by the USA]. 20 Minuten (in German). Archived from the original on April 27, 2021. Retrieved April 27, 2021.
  46. ^ Berger, Lena (March 19, 2021). "Luzerner Hackerin wird in Amerika angeklagt" [Lucerne hacker is charged in America]. zentralplus [de] (in Swiss High German). Archived from the original on May 25, 2021. Retrieved May 25, 2021.
  47. ^ Seydtaghia, Anouch (March 19, 2021). "Traqué par les Etats-Unis, le hacker suisse risque 20 ans de prison" [Hunted by the United States, the Swiss hacker faces 20 years in prison]. Le Temps (in Swiss French). ISSN 1423-3967. Archived from the original on May 26, 2021. Retrieved May 26, 2021.
  48. ^ a b Schulthess, Anja Nora; Muffler, Robyn (September 6, 2021). "Die Luzerner Hackerin Tillie Kottmann im Interview" [An interview with Lucerne hacker Tillie Kottmann]. 041 - Das Kulturmagazin (in German). Archived from the original on October 5, 2021. Retrieved October 5, 2021.
  49. ^ Rusch, Marlon (October 20, 2021). "Hackerin Tillie Kottmann: Tillie gegen die Vereinigten Staaten" [Hacker Tillie Kottmann: Tillie versus the United States]. Zeit Magazin (in Swiss High German). Archived from the original on October 28, 2021. Retrieved October 28, 2021.
  50. ^ Thalen, Mikael (July 18, 2022). "Anonymous mental health app Feelyou accidentally exposed 70,000 personal emails". The Daily Dot. Archived from the original on July 20, 2022. Retrieved July 20, 2022.
  51. ^ arson crimew, Maia (January 19, 2023). "how to completely own an airline in 3 easy steps". maia.crimew.gay. maia arson crimew. Archived from the original on January 21, 2023. Retrieved January 21, 2023.
  52. ^ DeGeurin, Mack (January 20, 2023). "Hacker Reportedly Gets Hands on Massive No-Fly List of Alleged Terrorist Suspects". Gizmodo. Archived from the original on January 21, 2023. Retrieved January 21, 2023.
  53. ^ a b Hasbrouck, Edward. "The #NoFly list is a #MuslimBan list". PapersPlease.org. The Identity Project. Archived from the original on January 21, 2023. Retrieved January 20, 2023.
  54. ^ Thalen, Mikael; Covucci, David (January 19, 2023). "EXCLUSIVE: U.S. airline accidentally exposes 'No Fly List' on unsecured server". The Daily Dot. maia arson crimew. Archived from the original on January 31, 2023. Retrieved January 31, 2023.
  55. ^ "maia arson crimew (@nyancrimew)". Instagram. Retrieved June 23, 2024.
  56. ^ "nyancrimew - kitten dreams, by sleepy.zone". sleepy.zone. Retrieved June 23, 2024.
  57. ^ "annieversary, nyancrimew - WE SPAWNED THE GOOPACABRA IN MINECRAFT AT 3AM", SoundCloud, retrieved June 24, 2024
  58. ^ "sleepy zone". sleepy.zone. Retrieved June 23, 2024.
  59. ^ "nyancrimew". SoundCloud. Retrieved June 24, 2024.
  60. ^ crimew, maia arson. "maia :3". maia.crimew.gay. Archived from the original on April 30, 2022. Retrieved May 23, 2022.
  61. ^ "maia: (@[email protected])". crimew.gay. Retrieved July 10, 2023.
  62. ^ crimew, maia arson (January 24, 2023). "also like the fact that they keep telling me identifying as a bi lesbian is (somehow, allegedly) resulting in real life violence against lesbians but as soon as i point out theyre trying to get me killed discourse doesnt affect anyone materially anymore". Tumblr. Retrieved October 2, 2023.
  63. ^ Vincent, James (March 19, 2021). "'Anti-capitalist' Verkada hacker charged by US government with attacks on dozens of companies". The Verge. Archived from the original on March 19, 2021. Retrieved March 19, 2021.
  64. ^ Menn, Joseph (March 26, 2021). "New wave of 'hacktivism' adds twist to cybersecurity woes". Reuters. Archived from the original on March 27, 2021. Retrieved March 27, 2021.
  65. ^ Fabian, Vogt (April 21, 2021). "USA wollen sie dingfest machen: Jetzt redet die meistgesuchte Hackerin der Schweiz" [USA want to arrest them: Now the most wanted hacker in Switzerland is talking]. Blick (in Swiss High German). Archived from the original on May 25, 2021. Retrieved May 25, 2021.
  66. ^ maia arson crimew [@_nyancrimew] (May 17, 2022). "i am now legally maia arson" (Tweet). Archived from the original on June 1, 2022. Retrieved June 1, 2022 – via Twitter.