Documents / FOIA release
This is a report of investigation by the Central Intelligence Agency's Office of Inspector General, dated 18 July 2014. It covers Agency access to Senate Select Committee on Intelligence staff files on RDINet, the network built for the Senate review of the rendition, detention and interrogation program. The report found that five Agency employees improperly accessed the SSCI Majority shared drive and that three IT staff lacked candor. It also found no factual basis for the CIA crimes report against SSCI staff.
Read from the scan by GLM-OCR; expect the odd misread word.
# SECRET//NOFORN
within to another shared directory. The report detailed further activity performed by a "Congressional user" on 24 June 2011 including copy/paste, keyword searches, and communication between "Congressional users" that directed them to review specific documents. As mentioned previously, OIG did not investigate the activity of the SSCI staff.
(U) Department of Justice Crimes Report
45. (U//FOUO) On 7 February 2014, then Acting General Counsel Eatinger sent the Department of Justice a Crimes Report (Exhibit E) that detailed a "limited security investigation." Eatinger wrote that a search tool installed on the system in question had a vulnerability that was exploited by SSCI staff members to view and retrieve documents on a part of the system to which they did not have access. Further, Eatinger explained that the file path to a document discovered while using the search tool could be copied and pasted into a browser access bar as a URL, which would give the user access to that document. The explanation stated that the user could bring a copy of the document across the system's firewall and paste it into a folder on the other side of that firewall. Eatinger wrote that the information made available to him indicated that a "non-employee" copied a URL, pasted it into the browser's access bar, and accessed the document, repeating this process numerous times. Eatinger told OIG that information provided by was the sole source of information for the 7 February 2014 report.
46. (U//FOUO) OIG did not identify a factual basis to support Eatinger's Department of Justice Crimes Report. OIG found that Eatinger had been provided inaccurate information on which the report was based.
47. (U//FOUO) told OIG that the information she provided to Eatinger was predicated on the Cyber Blue Team Report that stated that a Congressional user was able to navigate directly to a shared directory not intended for access to Congressional users. However, the Cyber Blue Team report did not identify the vulnerability stated in Eatinger's letter as the source of the documents. The source of the information cited by Eatinger was information provided to orally by Eatinger was unable to verify the accuracy of the information provided by or to review his legal conclusions regarding the authority to view the SSCI shared drive because he was recused from matters relating to RDI, including the Cyber Blue Team Report. In fact, Eatinger told OIG that he did not read the Cyber Blue Team report as he was informed that the report contained details of SSCI communication, which made him wary.
## V. (U) DOJ COORDINATION
48. (U//FOUO) On 3 February 2014, Title 50 U.S.C. $ \textcircled{3} $ 3517, OIG reported the matter of potential CIA officer violations of Titles 18 USC $ \textcircled{3} $ 1030 (Fraud and Related Activity in Connection with Computers) and 2511 (Authorization for Interception of Wire, Oral, or Electronic Communications) to the Department of Justice. On 8 July 2014, DOJ wrote to inform the OIG that DOJ had completed its review of the allegations and had no prosecutorial interest. Not linked to a story yet.
FOIA release, from the cia-readingroom collection. The PDF is mirrored here; the original link is above. The text was read from the page images by GLM-OCR; expect the odd misread word. 57 pages are in the text index: search them above, or from the library's search.