cyberangreb
Unauthorized intrusion into computer systems, networks, or data, prosecuted under federal law primarily through the Computer Fraud and Abuse Act
Definition
A cyberattack refers to any deliberate, unauthorized action targeting computer systems, networks, or digital data with intent to access, damage, disrupt, or steal information. While not a formally defined statutory term, it encompasses a range of criminal conduct prosecuted under federal computer crime statutes, most notably the Computer Fraud and Abuse Act.
The Computer Fraud and Abuse Act serves as the primary federal framework for prosecuting cyberattacks. Originally enacted in 1984 and amended several times since, the statute criminalizes seven categories of computer-related offenses, including accessing a computer without authorization, exceeding authorized access, transmitting malicious code, and trafficking in passwords. Protected computers under the act include those used in or affecting interstate commerce, which effectively covers most internet-connected devices in modern practice.
Federal prosecutors distinguish between accessing a computer "without authorization" and "exceeding authorized access." The former applies when an individual has no permission whatsoever to access a system, such as an external hacker breaking into a network. The latter covers insiders who access data beyond their permitted scope, though courts have interpreted this provision inconsistently across jurisdictions. Both forms constitute the foundation of cyberattack prosecutions.
Penalties under the CFAA vary significantly based on factors including the defendant's intent, prior convictions, and whether the attack caused damage or involved obtaining information for commercial advantage or private financial gain. Maximum sentences range from one year for simple unauthorized access to twenty years for attacks causing death or threats to public health or safety. The statute also provides for civil remedies, allowing victims to sue for damages and injunctive relief.
In true crime contexts, cyberattacks encompass high-profile cases of ransomware deployment, distributed denial-of-service attacks, data breaches exposing personal information of millions, and nation-state sponsored intrusions into critical infrastructure. The Department of Justice treats computer fraud cases as priority matters, reflected in dedicated prosecutorial resources and specialized training for handling digital evidence and international cooperation in cybercrime investigations.
