Cybercrime: When to call in the FBI

28.07.2006
When a company thinks it might have been the victim of a cybercrime, it's not always easy to figure out when to call in the feds for help. FBI agents Nenette Day and Andrew G. Arena answered some frequently asked questions about how companies can get help in the struggle with cybercrime.

If I have a problem, when should I come to the FBI versus a state or local law enforcement agency?

Arena: Most of this stuff is going to be interstate, if not international. We have a legal attache system. ... Between our relationships with our international partners with our legal attache offices, we hope to reach into those countries. We can hopefully have the wherewithal to reach into the country to try to get action quicker.

If my company is a victim and I go to the FBI, how do I know that the information isn't going to get out and embarrass my company?

Arena: It's not in our interest for that information to get out before our investigation is completed. Most times, it's somebody inside the company [who] for whatever reason puts that information out. When the investigation is completed and we begin the prosecution, obviously there is going to be publicity, and there's nothing we can do. At that point, you have to put the best spin on it you can. Any company that comes forward and assists law enforcement in stopping this problem, I think that will be seen as a positive.

If the damage is already done, what is the benefit of contacting the FBI, especially if I want to keep it as quiet as possible?

Arena: You'll probably get hit again. The only way to stop this is to get these people off the streets.

Day: Also, it shows a lot of social conscience for the company to try to get them off the street rather than letting them hit the next company. That they are trying to get the people convicted, that not only sends a message to criminals who want to try that in the future, but also gets these people off the streets so they don't hit the next company.

What programs do you offer to support businesses?

Arena: We have the InfraGard program. It's a public/private partnership that was first formed by the FBI in 1997, and now we're throughout the country. It brings together the financial community, the banking community, the gas companies, the phone companies -- basically, what we consider the critical infrastructure of this country -- and opens up communications. At every chapter meeting, we pass along trends [and] they learn from each other.