Cyber Terror
A cyber-stalker threatened me last year and, although it cost me several thousand dollars, I thought I’d outwitted him. I was wrong. And now I could be in danger.
Nine months ago I took my site off-line for several days to recover from an hacker attack. Someone with far too much time on his hands spent what had to be days, if not weeks, clicking away until he accessed my scripts and corrupted them. I took down the site, paid a professional to reprogram my entire database and added security measures that everyone said were invulnerable.
And they were. For nine months. Then on Saturday it became clear that security had again been breached.
On Saturday I knew that the details of my life had been compromised.
On Saturday I more fully appreciated the brilliance and determination of my assailant.
Although it took him months to do it, Bumpus (That’s what I call him now. If you’re familiar with the movie The Christmas Story, you’ll understand.) cleverly inserted a keystroke logger on my machine, buried in an email sent through my website contact plug-in. He managed to get through not only my top-of-the-line internet protection program, but also three layers of spam filters and my hosting company’s security measures. Bumpus is very, very smart.
For those unfamiliar with the term, a keystroke logger tracks and records, as the name suggests, every stroke of every key made on a computer. It’s the ultimate in cyber-spying. And through this window on my world, Bumpus silently spent 30 days intimately observing my every techno-move. Kinda creepy, isn’t it?
Bumpus watched me shop online and knows that I wear a size 10, my grandson is already into 18 months, and I buy clothes from Target and J. Crew. He doesn’t know that I returned the J.Crew items. Hah! Sucker! In hindsight, I’m a little disappointed in his prowess since he’s had access to my pictures and should have known those styles would make me look pregnant despite my relatively flat tummy. He knows a lot about me.
He knows which Diamondback games we’ll attend this season and in which seats we’ll be seated. He knows about trips planned to Palm Springs, Boston and Seattle. But does he know Seattle was canceled? Was he watching that closely?
Bumpus knows that I rabidly utilize the public library’s online reserve system and buy even more titles from Amazon. He’s privy to the fact that I read The Good Earth, Saffron Kitchen, Firefly Lane, The Year of Fog, The Night Listener, The Middle Place and Written on The Body during his 30-day foray. He may even know that I’m currently enjoying Change Me into Zeus’ Daughter and A Handful of Dust.
In addition to those facts, Bumpus knows my thoughts and feelings regarding each title because he read the “2009 Reading List” , which is kept on my laptop’s desktop, complete with personal rating system. Yes, I’m totally type-A.
Bumpus read (but didn’t help proofread) the letter of recommendation I wrote for a young job-seeker. He observed the details of a newly updated rental agreement, thus learning one of my kid’s addresses. He knows which universities my two younger children attend and the flight information for my eldest daughter’s trip from the UK. He knows my dentist’s name and when my next cleaning is scheduled. He knows when I get a bikini wax and when Charles colors my hair. He knows a lot. He knows too much.
For thirty days, via his keystroke logger on my computer, every document, transaction, communication and calendar item was at Bumpus’ disposal. For thirty days he collected usernames and passwords, PINs and credit card numbers. And he achieved it all while my Trend-Micro security system appeared to actively keep at bay all threats, and my web-host guaranteed complete privacy.
Bumpus is smart. So smart. And so incredibly patient.
After thirty quiet, patient, busy days, he made his move on Saturday.
Privy to so much, the assailant hacked into my BlueHost cPanel and went to work destroying www.katemclaughlin.net and www.katemclaughlinpoetry.com. He added 22 domains and renewed them for 10 years. He diverted my email to his accounts, masking the final destination by forwarding through nearly two dozen IP addresses. He inserted into my database a hidden folder that directed information to him every time the site was altered or updated. The instructions in that folder also alerted him to changes in security and financial information.
Then Bumpus began the defacement. He replaced my data and posts with foul language and pornographic images. He diverted visitors to sites that would disgust and frighten most of them. He inserted links to hateful places that only very unhappy or terribly disturbed people would create or frequent. He vented and ranted and raved and destroyed. He boldly wrought havoc.
But Bumpus didn’t count on one thing…I have incredibly good luck. Because my husband was on a plane grounded 15 minutes after take-off, my weekend plans were scuttled. Normally I’d have been committed and away while Bumpus did his dirty work. He would have had 48 hours to add layer upon layer of subversion and smut, the slogging through of which would have been daunting if not impossible. But I was home with no real plans and I caught him in the act before his destruction went too far or too deep. I hope I shut him down before you were exposed to his terror. If not, I’m truly sorry.
Here’s what happened: I tried to log into my admin pages and cPanel, but was denied access because usernames and passwords were incorrect. Immediately on the phone with BlueHost, I explained the situation and the tech expert and I got to work. He accessed my account. “Oh My God,” he gasped. “This is really bad. Your cPanel’s been hacked. Your site’s a mess. Have you seen the defacement?”
“No. I didn’t go to the sites, I only tried to access my admin pages.” I replied.
“Don’t. I’ve never seen anything like it. This isn’t a regular hack job, this is really personal. This guy is sick. I’m taking it down.” And he did.
My case was transferred to an abuse expert at BlueHost. Together we went through the process of deleting added domains, eliminating re-directions, and correcting security breaches. Then we deleted my entire database and reloaded a clean, saved version. Finally I changed my log-in information.
Within minutes Bumpus regained control. He bought more domain names with my newly replaced credit card, deleted my databases and inserted an instruction for automatic erasure if new information was uploaded. I changed a password and he knew it almost immediately. I deleted a credit card, he quickly knew the replacement. He may as well have been sitting next to me or peering over my shoulder.
I got emails from a secure account Bumpus had apparently overlooked, asking for change verifications and thus warning me of his intrusion on other sites. I worked with another abuse expert who discovered the keystroke logger on my machine. By the end of the day thousands had been charged to my credit cards and my sites had been destroyed and repaired three times.
For four hours on Sunday morning, a security expert scrubbed my computer and all the files on it. He discovered the keystroke logger Trojan, verified the date of infection and admitted he’d not seen this specific one before. He figured it was created just for me. I told you I was lucky! While he finished his work I warned my bank about potential misuse and abuse, informed my credit card companies of the theft and fraud, and canceled the involved accounts.
Following the scrub, I worked with BlueHost to clean and repair my cPanel and databases. During the process, which took nearly 20 hours, we discovered the hidden files that Bumpus inserted to learn security and database changes as they were made at BlueHost. My case was assigned to their most adept abuse expert who removed the added domains, reversed the charges, and then discovered and removed the brilliant bits of programming that Bumpus had created. Another member of the BlueHost staff corrected the email diversions and removed the auto-erase command Bumpus had buried. I then changed log-in information that had been compromised at 37 different sites.
My last support call to BlueHost occurred when I navigated three levels deep into my cPanel to correct a lingering email problem and discovered this message:
“Fatal Error. Do not assume that success is success. FATAL.”
Bumpus had broken into BlueHost’s own database and inserted this text into one of their static pages. Now he wasn’t just messing with me. He was messing with an emerging corporation with a lot to lose. In addition to their own programming and security worries, the folks at BlueHost suggested this might be a death threat. The FBI is involved.
And so, I’m at a crossroads.
I started this website because two of my children were diagnosed with a serious mental illness and I, for years, could find very little support. I set out to offer comfort and encouragement, and to share facts and solid, science and research-based information. I believe that stigma is rooted in ignorance and that knowledge and understanding will eradicate it. I’ve repeatedly resisted opportunities to monetize the site because I don’t want content to be altered by pharmaceutical or philosophical entities. Running this site is an expense on my ledger, not an asset. Why, then, does anyone want to sabotage it?
I believe Bumpus is terribly ill and is not medically compliant. I’d wager that, in the past, he was deemed a danger to himself or others and was hospitalized against his will. I believe that the side-effects of medication, which are often horrendous, are beyond Bumpus’ tolerance level and he fights for an individual’s right to refuse medical treatment.
Ironically, I agree with Bumpus. I’m not an advocate of forced medication. I believe in an individual’s right to choose or refuse medical treatment. Despite the worries, ruined relationships and devastation untreated mental illness can create, I adhere to the individual’s inherent right to choose. I’m on Bumpus’ side, but he seems unable to realize that.
He has fixated on me as the enemy, as someone who disseminates information he considers harmful. It’s partly because I’m a mom, and for him that is not a comfort. I feel deeply for Bumpus. I wish him wellness.
But what do I do now? As long as the threat was virtual, I felt safe. But now Bumpus knows my business address, my banking institutions and, most worrisome, my home address and phone number and where my kids live. Authorities have narrowed his location to a specific part of a specific state, and I’m somewhat comforted by the thousands of miles that separate us; but for some folks, miles are meant to be traveled. Is Bumpus one of those people?
May 19th, 2009 at 11:24 am
take good care - these people must have no life… sadness!
May 19th, 2009 at 1:22 pm
Reading this frightens me a lot, but saddens and angers me even more. Putting aside the fact that you are a dear friend, you are so much more to so many people. And this Bumpus character is not attacking you, alone - he is also attacking each and every person who visits this site and benefits from your generous work, gifted writing, and genuinely caring support.
May 19th, 2009 at 1:50 pm
They guy mad a mistake, he attacked your hosting company. I am sure action would of been taken if he had just focused on you but since he hacked BlueHost, I am sure more will be done. With the FBI involved they will track him down and deal with him.
Do not give up.
I can understand you are worried (ok, more than worried) as I am a Dad with 4 kids and spend a lot of my time online. However, if his many aim was to scare you off and to stop you writing then he would of won. Don’t let people like Bumpus bully you offline.
You made a good start by blogging about it, I think that the more we know about this kind of thing the better.
Good luck and be strong
Bob Toovey (@bobtoovey)
May 19th, 2009 at 2:31 pm
That is insane! I didn’t see the changes he made to your site, thank goodness.
I hope it all gets figured out quickly. I think the potential threat to children is the hardest to swallow.
I’ve had a few stalker type individuals come in and out of my life, in the cyber realm and in real life, but ignoring them has thus far made the problem go away… Not so in this situation.
You are such a support to so many (myself included) and I don’t like to see you treated this way. xo
May 19th, 2009 at 2:58 pm
OMG!!!…..I JUST WOKE UP WITH A STIFF NECK AS I’D FALLEN ASLEEP WHILE TWITTERING & JUST NOTICED YR DIRECT MSG WITH DETAILS OF YR STORY 4 MY INPUT…..1STLY, I’D JUST LIKE 2TELL YA, THAT YOU, MY DEAR, ARE A REALLY GREAT READ!!!….I ENJOYED YR WRITING STYLE SOOOOOO MUCH…..DESPITE THE SERIOUSNESS OF THIS MATTER, YOU STILL HAD THOSE LITTLE FUNNY BITS, THAT GAVE ME A CHUCKLE….I’M GLAD YOU HV YR COUNTRY’S FBI ON2 THIS MATTER(4YR OWN PIECE OF MIND)AND I WILL KEEP POSTED 4UPDATES….I WISH U THE BEST OF LUCK IN ALL YR ENDEAVOURS WHERE YR ACTIONS REGARDING THIS MATTER IS CONCERNED….I’VE ALSO GOT MY OWN BUMPUS BELIEVE IT OR NOT….NOWHERE NEAR AS SMART AS YRS THO…LOL…BUT STILL ANNOYING……KEEP ME POSTED GIRL AND GOOD LUCK!!!
Sandi Nathan
Melb, Au
May 19th, 2009 at 3:26 pm
Palestar, Thanks for the ongoing support. It is sad, isn’t it? I really do feel for Bumpus. He musn’t have much happiness or joy in his life.
Kat, I know the site helps lots of people. I get several hundred individual visitors a week and several thousand bots and hits. I just don’t know if the help and support it offers is worth the risk.
Bob, Your kind words and reaching out mean a lot to me. I’m seriously wrestling with the notion of giving in and giving up, but I’m nothing if not tenacious. Have not yet figured out my position.
Vesper, You are one of those to whom I feel connected because of this site, and I’m grateful for that connection. You’re right–the potential threat to my family is of greatest concern.
Sandi, Sorry you awoke with a stiff neck, but so glad you logged in and joined the discussion. I wonder if we each have our own Bumpus? I wonder if there is a Bumpus Club? A Bumpus Chat room? Maybe a special Bumpus prison cell? Just wondering.
Kate
May 19th, 2009 at 3:47 pm
Kate, I’ve been pondering your story and talking about it with others all day. There is so much in this story I’m having to take long breathing time to digest and assimilate it. First, I’m sorry and bummed that this has happened to you. Second, astonished at the depth and complexity of the whole thing. It is an intense spotlight shining into the capacity and potential of a mind that is bent and untreated, and how the intersection with technology can and does pan out in these cases.
On another note, your writing, thoroughness, clarity, poetry, compassion, zen, and love are all pulsing in this piece. I want people to recognize this and I’m pondering how best to nurture that. You’re amazing.
Then there’s this aspect. I just taught a beginner’s blogging class last night, a series I teach at a nearby Unity church, for their Careers in Transition folks. I got them on Twitter and am herding them along, as you can see in my tweets. I want to retweet your post, and I’m waiting a bit, because they are faithfully going where I direct them, and this is too much for their tender newness today. They’re already scared, along with inspired and exhilarated, so, you see.
But mostly I want you to be safe. I want this person apprehended. And I know that even that doesn’t last very long. I’m very bugged by all this.
Last thought, it occurs to me, while it’s true if we’re online we are all vulnerable, when it comes to this level of focused neurosis, it happens to people whether they are online or not. Somehow this helps me point energy towards not being paranoid. The ‘net makes it easier, in a way. It also makes it safer, in a way, because we can let each other know.
I’d just love to sit down and talk to you right now. Tonight, I’ll hold a BABS gathering, and we’ll discuss it. (Bay Area Bloggers Society.)
Bright golden blessings on you and yours,
Suzanna Stinnett
May 19th, 2009 at 6:17 pm
One of my brother’s stalkers is mentally ill, and it does pose a problem - you’re so damned angry and yet you feel compassion for them. Regardless, NO ONE deserves to live in fear. There must be consequences.
May 20th, 2009 at 12:54 pm
I don’t know what to say. I would be really concerned but continue doing and living as if this sad human never entered my world, (why give him that power?). This person wanted more destruction in your life than he got and thank goodness he was bold enough to involve a company that would involve the FBI, he will be caught. There is someone sitting on your shoulder………a guardian angel
May 20th, 2009 at 1:28 pm
Dearest Kate,
What a frightening experience! And yet, you have once again “outed” the issues for all to learn from. This person’s abusiveness and the fear he/she creates cannot survive long after it is shared with compassionate friends and savvy experts.
Onward, my dear Mother Warrior! Much Love and Many Prayers are coming your way~
Mary
May 20th, 2009 at 2:18 pm
DEAR FRIEND…. THIS IS OUTRAGEOUS BEHAVIOR! I feel very sad that anyone would be so crewel, and for what reason? You have done so much research, and have helped so many of us… I would not have known in time, to have two members of my family diagnosed if not for you! You are a brilliant writer, and your book made me really look deep into my own ways of dealing with Mental issues! Please do not give up what you love, and are so good at, because of this wayward sole!
May 20th, 2009 at 4:42 pm
Oh Kate - not “medically compliant” - you do have a way with words! This guy should be in a rubber room with Nurse Ratchett for heavens sake! And totally medicated.
Don’t stop - I know you are a comfort to many.
May 21st, 2009 at 8:42 am
Are you serious? I’m beyond shocked. I’m scared…
And I’m rethinking where I am right now with social media in general.. wow. that’s all I can say. wow.
Makes me not want to be much of a success in the blogging/online world.. sheesh! I hope you are safe??
May 21st, 2009 at 8:56 am
Thank you for your courage and forgiveness. I know this harassment makes it hard for you to continue your mission. We parents of children with special needs appreciate you.
May 21st, 2009 at 9:09 am
Kate,
This is a sad commentary about the lengths some people will go to mess wit someone’s life. This is truly a sad and scary tale. As others have said, living your life as though nothing has happened is the best revenge. I hoe the FBI locates this person and deals harshly with them.
I applaud your courage and perseverance at living your life and not giving in to this person, and to the tech people that have helped you clear your computer and at your host.
Thank you for sharing this piece of your world with others.
Live strong, Kate.
May 21st, 2009 at 10:22 am
Suzanna, I look forward to hearing back from you regarding the input from BABS. I’m sure their collective creativity will contribute sage advice.
Julie, You’re right. Consequences are necessary for those who prey and break the law. I’m sure Bumpus thought he was beyond that. he is not.
Barb, For now I feel safe and am contemplating the future of the site and this work.
Mary, Your positive, loving energy has been a blessing in my life for years. I am lucky and grateful.
Marta, I am so glad this work has helped you and others. I know that many appreciate the information and thank you for sharing your kind words.
Beth, Yeah…you know me Beth…let’s play with the words and make it PC!
Carissa, I was naive prior to this. I’ too, am engaging in a lot of contemplation. The novel is sounding a lot more rewarding right about now!
Jeanette, Thank you for sharing your thoughts here and for sending those additional insights directly. We are all in this together.
RJ, It is sad isn’t it? But I don’t feel courageous. I feel protected. I’ve been assured that FBeyes are watching.
May 21st, 2009 at 10:36 am
Kate,
I read your blog because I caught a retweet on Twitter this morning. This is awful and I feel so bad for you. I am unfortunately seeing this a lot right now. I’ve worked in law enforcement for 12 years. It is crazy what is happening right now with computers, the Internet, and people’s personal information.
I just don’t understand why “these” people choose to target individuals. I know that you will never been able to have the trust online that you once did. This is detrimental too, because everything seems to involve the Internet or E-Mail in today’s day and age.
Enough of my rambling..I just wanted to give you a big cyber hug!
May 21st, 2009 at 10:45 am
Oh my gosh, how absolutely horrifying! I hope they let you know if they find out more, or what the conclusion is.
I’m glad your site was restored! Man….I’m forwarding this post to others.
May 21st, 2009 at 10:53 am
Kate - Thank you for the Tweet about this. I’m sad to say my own ill son can get that obsessive. I don’t think he has the tech knowledge to do it though. Thank God.
As soon as I started reading, I came to the same conclusion you did — a very ill person who is not treatment compliant (How’s that for PC?)
I sway between court-ordered treatment and the freedom to choose. Sometimes I so wish that my son would be ordered to treatment. On the other hand, there are so many variables, like side-effects and even being capable of remembering to take meds.
Sadly, now that the FBI is involved, Bumpus may go to prison where mental health treatment is almost non-existent in some states. Instead of rehabilitation, he will only be made worse.
Hang in there. Don’t give in.
Blessings,
Susan
May 21st, 2009 at 11:23 am
Found your site through Twitter on a retweet and I’m sad to have found it under such terrible circumstances. I shudder at what this heinous person has done to you. I feel terribly for you. Wishing for you and your family to stay safe..
May 21st, 2009 at 11:24 am
Julie, I had no idea this kind of malicious behavior was so common. Usually, however, the hacker’s goal is to get into as many machines as possible. That’s where all of us are more vulnerable.
CanCan, i appreciate your sharing the link. the more you know the better. A reminder to everyone–my security adviser recommends passwords with 4+ letters, at least one capped, a symbol and 3 or more numbers.
Susan, Thank you for caring and commenting. I fully understand the family perspective and had to really consider where I stand on forced compliance before coming to my current position. It’s a very personal perspective for most of us.
May 21st, 2009 at 11:30 am
ive never read your site before today, I clicked a twitter link.
I’m horrified this has and is happening to you. Thank god the FBI is involved. I sure hope this person not only gets put behind bars, but gets the help they need.
May 21st, 2009 at 11:50 am
This makes me want to never log on again. Sorry you’ve had to go through this. I’m amazed that you can be quite funny about this terrible situation. Good for you for hanging onto your sense of humor (I agree that he should have proofread for you). I hope they catch him.
May 21st, 2009 at 12:04 pm
You did the blogging community a great service in posting about your experience. I’m so sorry this has happened to you and your family but I have to believe in the system and that it’ll be handled by the authorities. I’m completely stunned. Thank you for being so brave enough to share and stay online. Your strength is inspiring.
May 21st, 2009 at 12:35 pm
I’m so sorry to hear this happened to you.
May 21st, 2009 at 12:46 pm
I am so very sorry you are going through this. I can’t believe the lengths this person went to, it’s out of a horror movie. I hope you and your family are safe. Be vigilant! Take care
May 21st, 2009 at 12:47 pm
Angela and bluepaintred, I’m glad you found your way here, despite the circumstances. Lots of information for lots of people to be found here. Thank you for the time and thoughtfulness it took to sign in and comment.,
Wendy, I learn something of value through every one of life’s experiences. this is no exception. And they will catch him.
Jacquie, I was stunned, too. I thought I’d followed all the safety rules. I’ve learned a bit more and am happy to share it. We all learn and grow together.
Thanks Gina.
May 21st, 2009 at 2:04 pm
Hi Kate - I got your DM of this through Twitter. This is horrifying - I’m so sorry you had to got through this. This.. goes beyond anything I have ever heard of. I admit to not understanding much of the technical jargon but it sounds like this person went well beyond the remit of your garden variety evil genius/fruitloop. Please continue to share any insight you have gained and stay safe.
BTC.
May 21st, 2009 at 3:50 pm
How awful! Something akin to rape. I hope they can catch this guy and deal with him appropriately!
May 21st, 2009 at 5:48 pm
Florencia, BTC & Kristi– I appreciate your comments and support. I’m sure that the more people hear about this, the better. Unfortunately people like Bumpus thrive in secrecy and anonymity.
May 21st, 2009 at 5:57 pm
Hello Kate,
Thank you for sending the DM pointing me to this message.
I envision you, your family and your home surrounded by a powerful blue bubble of protection. My heart goes out to you going through such a difficult time.
I must say I was very impressed by the actions you took and the responsiveness of your host company. You seem to have an amazingly cool head and to be getting good support.
I wish for this to end in the very best possible way, and swiftly.
best wishes,
Nili
May 22nd, 2009 at 4:33 am
OMGosh! I am soooo sorry for your troubles. I’m so glad the FBI are involved now. While my internet troubles paled in comparison, I understand how absolutely alone it feels to go through something like this. Family and friends who don’t understand the importance of a professional internet reptuation and presence treat it like you’re mad at the writer’s of a soap opera, dismissing the damage like it has no real meaning.
Of course those that do understand can be empathetic or sympathetic. While thier support is so necessary and totally appreciated, it doesn’t solve the problem.
I wish you all the very best with tihs and I’m soooo sorry to see you having to go through it all.
Let’s hope for quick action so you can return to enjoying your days without fear this stalker will harm you ever again.
Warmly,
Jenny
May 22nd, 2009 at 7:02 am
I was directed to this story by a few other bloggers. I’m speechless.
Thanks for sharing.
All the best,
May 22nd, 2009 at 7:32 am
Nili, J.R. and LeSombre,
Glad you found your way here and happy you have commented. This is a lesson for all of us.
I really believed that, as long as my blog was not monetized and I didn’t have associated cash flow, threats were non-existent.
I also believed that because I optimistically share, support, accept and try to love unconditionally, I was protected from this kind of attack. Didn’t see it coming.
In hindsight, however, more good has resulted than bad. The related problems have been mostly solved and I’ve learned a lot. But I’m still thinking about moving on regarding the focus of my written work. Not sure how much more I can add to the mental health arena.
Kate
May 22nd, 2009 at 11:08 am
Sad part is a lot of cases like this never get pursued because they are on the internet. I hope they catch this guy for you and do something to help him. Sorry you had to go through this.
May 22nd, 2009 at 2:55 pm
I know its hard, but your site seems to be doing good work and it is something that you believe in: providing support, encouragement, and education about mental healthcare issues. Keep up the good work even when the going gets rough.
May 22nd, 2009 at 4:23 pm
I use Bluehost too. I am glad to know they were so helpful in this situation. They have always been really good to me. I hope I never experience what you are going through. Good grief. If they are that brilliant you would think they could find better use for their talents than terrorizing someone. As you said they are obviously very sick.
May 22nd, 2009 at 4:31 pm
Scary on all sorts of levels and I’m sure I’d not know how to deal with such a threat! I’m going to bookmark this, but hopefully not for future reference.
May 22nd, 2009 at 11:11 pm
Hi! Found you via a shared and reshared Google Reader item. My horror increased at every line, every paragraph, I am so thankful for you that you managed to catch the attack as it had just launched, and that you had excellent support from your host. This guy is scary - and that’s putting it mildly! As others have stated before me, I do hope that the FBI will get this solved for you.
Take care.
*lynne*