An alleged sports content pirate is accused of not only hijacking leagues’ streams but also threatening to tell reporters how he accessed their systems.
Demanding payment in exchange for not publicly disclosing a vulnerability isn’t the same as a bug bounty program; it’s extortion.
A 30-year-old alleged sports content pirate in Minneapolis, Minn., has found himself on the receiving end of a criminal complaint alleging that he not only stole user account credentials and sold access to pirated sports content. According to the U.S. Department of Justice, once its site was shuttered, he also went on to demand $150,000 from Major League Baseball in exchange for not telling reporters how he accessed its systems.
The defendant, identified in a newly unsealed complaint (PDF) as Joshua Streit, allegedly operated a site called HeHeStreams that sold subscribers access to hijacked user accounts for Major League Baseball (MLB), the National Basketball Association (NBA), the National Football League (NFL) and National Hockey League (NHL) for about $129 a year, undercutting prices of legitimate sources.
According to prosecutors, the MLB lost at least $2,995,272 due to Streit’s