IRS possessed Stingray cellphone surveillance gear, documents reveal

The 2009 IRS/Harris Corp invoice is mostly redacted under section B(4) of the Freedom of Information Act, which is intended to protect trade secrets and privileged information. However, an invoice from 2012, which is also partially redacted, reports that the agency spent $65,652 on upgrading a Stingray II to a HailStorm, a more powerful version of the same device, as well as $6,000 on training from Harris Corporation.

 

Stingrays are the best-known example of a type of device called an IMSI-catcher, also known as “cell-site simulators”. About the size of a briefcase, they work by pretending to be cellphone towers in order to strip metadata and in some cases even content from phones which connect to them.

 

Despite their extensive capabilities, they require only a low-level court order called a PEN register, also known as a “trap and trace”, to grant permission for their use.

 

Immense secrecy has so far surrounded these devices, but a picture is slowly emerging which shows widespread use. Various revelations by the American Civil Liberties Union and news outlets including the Guardian had shown that at least 12 federal agencies are already known to have these devices, including the National Security Agency and the Federal Bureau of Investigation. The IRS makes 13.

 

In November 2014, the Wall Street Journal uncovered an operation run by the US Marshals Service using a Boeing-made IMSI-catcher known as “dirtbox”. This is the first time that the IRS has been found to own the device.

 

Read More: IRS possessed Stingray cellphone surveillance gear, documents reveal | US news | The Guardian