Friday | 9 January, 2009
CIO
Juris e-prudence
There was a time when judges were prepared to consider arguments that incompetence or computer problems might be to blame if companies were unable to produce e-mails on demand.
Sue Bushell 11 October, 2005 12:30:11

E-mail Briar Patch

To get a sense of why the Morgan Stanley case might herald a "legal Chernobyl", it is worth considering the case in some detail. To sum up briefly the relevant aspects of a complicated case, early in the case of securities fraud initiated by Ronald Perelman against Morgan Stanley (MS), in which Coleman (Parent) Holdings (CPH) sued MS for aiding and abetting and conspiring with Sunbeam to perpetrate a fraud, CPH began to suspect MS was failing to search vigorously enough for e-mails responsive to its discovery request.

On April 6, 2004, the court entered an Agreed Order that required Morgan Stanley to search its oldest full backup tapes for e-mails subject to certain parameters, and certify compliance. Morgan Stanley certified compliance with the Agreed Order on June 23, 2004. All seemed well until November 17, 2004, when CPH learnt MS had found some backup tapes that had not been searched. Two months later, CPH served a "Motion for Adverse Inference Instruction Due to Morgan Stanley's Destruction of E-mails and Morgan Stanley's Non-compliance with the Court's April 16, 2004 Agreed Order", claiming that Morgan Stanley's violation of the Agreed Order justified an adverse inference against it.

The Florida state judge overseeing the case, Judge Elizabeth Maass, seemingly agreed, ruling that Morgan Stanley "deliberately and contumaciously violated numerous discovery orders", and finding it had hidden information about its violation and coached witnesses to avoid mentioning compliance problems.

The alarming thing about all this from the CIO's point of view is that none of the problems, according to Morgan Stanley, was even remotely intentional. According to a Wall Street Journal story, Morgan Stanley responded to the paper's questions with a written statement claiming all of its recent "discovery problems" stemmed from honest mistakes, such as computer glitches and misplaced backup tapes, and were not attempts to stonewall adversaries.

If those claims are true, the result not only could not have been worse for Morgan Stanley but also highlights the vulnerability of many organizations to the same perils. Because Judge Maass, showing no patience for such defences, issued a partial default judgement against the company, essentially handing an automatic loss to the Wall Street firm, because "the [discovery] abuses have continued unabated", and said she intended to instruct the jury to assume that the firm had helped defraud Perelman.

"The presiding judge in this case essentially directed a verdict against Morgan Stanley for concealing potentially harmful e-mail messages and refusing to cooperate in good faith in the pre-trial discovery process," Rosenberg says.

In the course of the litigation, the role of two IT executives in particular came under scrutiny. As detailed by the Wall Street Journal story, Arthur Riel, then head of Morgan Stanley's technology compliance group, was the one who signed the June 23, 2004 court document certifying he had handed over all e-mails the firm had agreed to produce in the suit.

But two weeks earlier, according to the Wall Street Journal story, Riel had not been so sure. "The storage folks found an additional 1600 backup tapes in a closet," Riel told two Morgan Stanley lawyers, according to a deposition quoted in court papers. MS acknowledged in court that they had not searched the tape for e-mails before Riel signed the document. Riel at the time was overseeing a multimillion dollar project to put almost 300 million e-mails into an easily searchable archive, moving them over from storage on magnetic tapes. Morgan Stanley said Riel, believing the work to be pretty well completed, searched only the new database.

As a result, Riel's certification dated the oldest available tape at January 2000, although he and his team knew by early July 2004 that the newly discovered tapes went back to the late 1990s, the period at issue in the suit. Court documents show Morgan Stanley did not disclose this knowledge until November. According to Riel's attorney, Jeffrey Pigano, that is because Riel believed the certification only covered the archive, his area of responsibility, but not tapes that had not yet been entered into the archive, while a Morgan Stanley spokesperson claimed that in general only a small fraction of its tapes contained e-mail and that it did not know whether the newly discovered tapes did so.

According to the Wall Street Journal story, Riel was placed on administrative leave last August, accused of looking through co-workers' e-mail in violation of company policy in a matter the company claimed was unrelated to the suit. His lawyer called that explanation "materially misleading", and noted Judge Maass had called his client a "whistleblower" in connection with a separate SEC investigation into Morgan Stanley's relationships with third-party vendors.

Whatever the truth of that matter, the Wall Street Journal says Riel's responsibilities were then turned over to Allison Gorman Nachtigal, who testified that the department provided no written instructions in how to search one of its key systems for e-mail, that a software bug caused many searches to be case-sensitive, and that there was a shortage of computer storage space. She later testified she was not told to merge the newly discovered tapes with the department's database, and so put the task near the bottom of "a long list", apparently unaware of the ongoing lawsuit.

Featured Whitepaper Sponsors
Market Place
 

Smart SOA World Tour

Discover how SOA can create smarter outcomes for your business.

Attend and learn:

  • How SOA is helping leading companies to become more agile
  • Where you should be applying SOA processes in your company
  • The top SOA implementation mistakes to avoid

Click here for more information.
  • +

    CIO Live Podcast #79: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires Part II 05 October, 2007 06:00:00

    For his new book, The Outsider's Edge: The Making of Self-Made Billionaires, social researcher Brent D Taylor spent four years of intensive research investigating the psychological make-up and backgrounds of some of the world's richest men and women, including IT luminaries Bill Gates, Larry Ellison and Steve Jobs. Taylor discovered that, despite working in different industries and coming from different upbringings, they all have one thing in common -- they are all outsiders.
  • +

    CIO Live Podcast #78: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires 28 September, 2007 17:34:25

    For his new book, The Outsider's Edge: The Making of Self-Made Billionaires, social researcher Brent D Taylor spent four years of intensive research investigating the psychological make-up and backgrounds of some of the world's richest men and women, including IT luminaries Bill Gates, Larry Ellison and Steve Jobs. Taylor discovered that, despite working in different industries and coming from different upbringings, they all have one thing in common -- they are all outsiders.
  • +

    CIO Live Podcast #77: Panasonic Speeds Up Trans-Pacific File Transfers, Part III 21 September, 2007 07:00:00

    Part three in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    CIO Live Podcast #76: Panasonic Speeds Up Trans-Pacific File Transfers, Part II 14 September, 2007 07:00:00

    Part two in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    CIO Live Podcast #75: Panasonic Speeds Up Trans-Pacific File Transfers, Part I 07 September, 2007 07:00:05

    Part one in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    TJX Maxx hacker banged up for 30 years 09 January, 2009 11:26:00

    Key figure in the infamous TJX Maxx Wi-Fi hack of 2005 has been sentenced to 30-years in prison by a Turkish court.
    Maksym Yastremskiy, the Ukrainian accused of being a key figure in the infamous TJX Maxx Wi-Fi hack of 2005, has been sentenced to 30-years in prison by a Turkish court.
  • +

    Data breaches rose sharply in 2008, says study 08 January, 2009 08:27:00

    More than 35 million data records were breached in 2008, according to the Identity Theft Resource Center.
    More than 35 million data records were breached in 2008 in the U.S., a figure that underscores continuing difficulties in securing information, according to the Identity Theft Resource Center (ITRC).
  • +

    Rogue SSL certificate exploit puts VeriSign on the spot 07 January, 2009 11:04:00

    Wishes "white hat" researchers had notified VeriSign before public demo.
    Following the success of researchers last week in creating a false SSL certificate based on VeriSign's RapidSSL brand, the company is scrambling to explain how it happened, how it's preventing it from reoccurring, and whether its other SSL certificate-generation services are at risk.
  • +

    With Gaza conflict, cyberattacks come too 05 January, 2009 08:03:00

    Pro-Palestinian hackers have defaced thousands of sites following attacks in Gaza.
    The conflict raging in Gaza between Israel and Palestine has spilled over to the Internet.
  • +

    5 ways to secure your Blackberry 18 December, 2008 12:58:00

    What do Tom Cruise and the McCain campaign have in common? They have both been bitten by the loss of a Blackberry. Mobile expert Dan Hoffman gives advice on how to keep your cherished mobile device safe, even if it's out of your hands
    What do Tom Cruise and the McCain campaign have in common? They have both been bitten by the loss of a Blackberry. Mobile expert Dan Hoffman gives advice on how to keep your cherished mobile device safe, even if it's out of your hands.
CIO Webcast Innovation #8 - What are the biggest roadblocks to IT's involvement in innovation at your company?
Watch the latest latest edition of CIO Innovation which is now available for download.
Watch the webcast
Sign up to the CIO Innovation update email


CIO Live Podcast #79: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires Part II
Listen to the latest edition of CIO Live which is now available for download.
Listen to the podcast
Sign up to the CIO Live email
Whitepaper

Everything you need to know about email and web security (but were afraid to ask)

What you don’t know can destroy your business. It’s hard to imagine modern business without the internet but in the last few years it has become fraught with danger. Read on to discover how internet security can give your business a competitive advantage.