Ajit Pai Knew FCC Cyberattack Was Fake for Seven Months but Kept Quiet

We may earn a commission from links on this page.
Image for article titled Ajit Pai Knew FCC Cyberattack Was Fake for Seven Months but Kept Quiet
Photo: Dell Cameron (Gizmodo)

Asked only once at a Senate hearing Thursday about the fake security incident that’s hounded his agency for more than a year, the chairman of the Federal Communications Commission, Ajit Pai, acknowledged for the first time knowing secretly for several months that his office likely fed U.S. lawmakers false information.

At an oversight hearing largely dominated by discussions about the state of the nation’s broadband and cellular infrastructure, Pai explained that he was urged by the commission’s inspector general (IG) to keep under wraps details of an ongoing investigation. “Do not say anything to anyone,” Pai told the committee, regarding the request he says he received from the IG’s office. Pai then asked lawmakers to put themselves in his shoes.

Advertisement

“It’s a difficult position to be in,” he said.

Released on August 8, the IG report found that senior FCC officials had misled Congress and the American public by first announcing, and later defending in letters to lawmakers, a claim that distributed denial-of-service (DDoS) attacks had crippled the commission’s comment system last May, amid efforts by majority Republican members to roll back Obama-era net neutrality protections.

Advertisement

Investigators concluded after seven months that the DDoS claims were, at best, “a rush to judgement” and, moreover, the result of a failure to conduct any kind of actual analysis that would be required to prove a cyberattack had occurred.

In a statement released prior to the report, Pai sought to diminish the fallout stemming from interviews of his staffers—some of whom were shown to have misquoted FBI agents in written remarks to U.S. senators—pinning the blame instead almost entirely on his former chief information officer, Dr. David Bray, whom Pai said had provided “inaccurate information.”

Advertisement

“Once we knew what the conclusions were it was very hard to stay quiet,” Pai told the Senate Committee on Commerce, Science, and Transportation. The hearing was attended by the full commission—one Democrat and three Republicans, including Pai, who was appointed to lead the FCC by President Trump early last year.

“We wanted the story to get out,” the chairman said, claiming, perplexingly, that the IG report “vindicated” his office by placing full responsibility for the falsehoods on Bray. (The report also concluded that FCC leaders knew and failed to inform the commission’s contracted IT and security staff about an expected spike in web traffic that would be directed at the FCC system by comedian John Oliver, host of HBO’s Last Week Tonight.)

Advertisement

Senator Brian Schatz, a Democrat and the only lawmaker to bring up the IG report on Thursday, said it was “difficult to digest” that Pai had not been more critical of his CIO’s assessment, given the unprecedented number of comments received by the FCC after Oliver’s first net neutrality segment in 2014. “I think a lot of people’s first instinct was it didn’t make any sense,” Schatz said of Bray’s diagnosis.

“My assumption was it was John Oliver’s viewers,” said Pai, adding that he was informed otherwise by the CIO, whom he said claimed “99 percent” confidence in identifying malicious actors behind the comment system’s downtime.

Advertisement

The FCC inspector general, David Hunt, did not immediately respond to a request for comment.

The FCC investigation, started to examine the source of the purported attack, shifted in December after investigators became concerned that three FCC officials, including Bray and the agency’s chief information security officer, Leo Wong, may have committed a federal crime by feeding false information to Congress. The Justice Department, where the case was referred in January, declined to prosecute the officials; it has declined to say why.

Advertisement

In a letter earlier this week, four Democratic lawmakers demanded to know, among other things, when exactly Pai first learned that his office misinformed federal lawmakers, including several with oversight authority, such as Rep. Debbie Dingell. While mentions of the scandal were few at Thursday’s hearing, that puzzle has at least been solved:

Telling no one, the chairman has known all year.

Update, Sept. 4: In response to questions for the record submitted by Rep. Debbie Dingell, now obtained by Gizmodo, FCC Chairman Ajit Pai acknowledged being aware of the inspector general’s findings prior to a House oversight hearing on July 25th.

Advertisement

Asked if the inspector general has advised him in writing not to “correct the public record and your misrepresentations to Congress,” Pai replied that the request was not documented, but given orally.

Advertisement