Software developer accused of damaging Cleveland company’s computer system | USAO-NDOH


Acting U.S. lawyer Bridget M. Brennan has announced that a federal grand jury sitting in Cleveland has issued an indictment accusing Davis Lu, 51, of Houston, Texas, of damaging protected computers. The defendant is accused of using his position as a software developer to execute malicious code on his employer’s computer servers. The accused was arrested this morning without incident.

According to the indictment, the defendant was employed as a senior software developer 1 working with emerging technologies for Company 1, a company which had its main office in Cleveland, Ohio. On or around August 4, 2019, Company 1’s servers experienced an outage that crashed production servers and prevented employees from accessing those servers.

The indictment states that Company 1 investigated the source of the disruption and discovered unauthorized code installed on a server, causing an infinite loop to be created and that server crashing. In addition, it is alleged that the company found additional code that deleted files associated with user profiles, thereby denying users access to the software 1.

The indictment states that Company 1 asked the defendant to return his computer provided by the company. It is alleged that shortly before turning over the computer, the defendant deleted encrypted volumes, attempted to delete Linux directories and attempted to delete two more projects. Additionally, the company found out that the defendant allegedly searched the internet on how to escalate privileges, hide processes, and delete large folders and / or files.

According to the indictment, as a result of these alleged actions, Company 1 suffered a loss of at least $ 5,000 and damage to at least ten protected computers.

An indictment is only an accusation and does not constitute proof of guilt. An accused has the right to a fair trial in which it will be up to the government to prove their guilt beyond a reasonable doubt.

In the event of a conviction, the defendant’s sentence will be determined by the court after considering the factors specific to that case, including the defendant’s previous criminal record, if any, the defendant’s role in the offense and the characteristics of the violation. .

In any case, the penalty will not exceed the legal maximum, and in most cases, it will be less than the maximum.

This case has been investigated by the Cleveland Division of the FBI and is being pursued by United States Assistant Prosecutors Brian S. Deckert and Daniel J. Riedl and Senior Counsel Adrienne Rose of the Section of the United States. computer crime and intellectual property of the Ministry of Justice.


Gordon K. Morehouse