In 1999, a 15-year-old hacker named Jonathan James, operating under the online alias c0mrade, successfully breached the highly secured computer networks of the United States Department of Defense and the National Aeronautics and Space Administration (NASA). These intrusions rank among the most notorious juvenile cybercrimes in history.
Operating from his family's home in Pinecrest, Florida, James managed to bypass firewalls and install backdoors into some of the most sensitive systems in the United States government. His actions forced NASA to entirely shut down its internal systems to secure their networks, while the Department of Defense faced significant credential leaks. James ultimately became the first juvenile in the United States to be incarcerated for cybercrime.
The Pentagon (DTRA) hack
Between August 23 and October 27, 1999, James targeted the Defense Threat Reduction Agency (DTRA), a division of the Department of Defense responsible for analyzing threats to the US from nuclear, biological, chemical, conventional, and special weapons.
James gained unauthorized access to a DTRA server situated in Dulles, Virginia. Once inside, he installed a hidden backdoor program that allowed him to intercept communications and system traffic. Through this covert access, James captured over 3,000 highly confidential messages and gathered dozens of usernames and passwords of DTRA employees. This credential theft theoretically gave him the ability to roam freely through military networks.
The NASA breach
Shortly after compromising the Pentagon, James turned his attention to NASA's Marshall Space Flight Center in Huntsville, Alabama. Bypassing their network security, James accessed sensitive developmental systems.
Theft of ISS source code
While inside the NASA servers, James downloaded proprietary software valued at approximately $1.7 million. This wasn't standard administrative data; it was the highly sensitive source code that controlled the physical environment of the International Space Station (ISS). The software managed critical life-support functions, including the temperature and humidity of the living quarters.
Upon discovering the breach, NASA administrators were forced to abruptly shut down their entire network system for three weeks in July 2000 to assess the damage, patch the vulnerabilities, and ensure the integrity of the ISS software. The downtime and subsequent security auditing cost NASA an estimated $41,000.
Investigation and arrest
The audacity of the attacks on the Department of Defense and NASA triggered an immediate and massive federal response. The FBI, alongside NASA's Office of the Inspector General and the Defense Department, launched a joint cyber-manhunt.
Investigators eventually traced the network intrusions back to a residential IP address in Pinecrest, Florida. On January 26, 2000, federal agents raided the home of the James family. Because Jonathan James was only 15 at the time of the offenses and 16 at the time of the raid, his identity was initially protected under juvenile privacy laws, and he was referred to only as "c0mrade" in early press releases.
Trial and legacy
In September 2000, James pleaded guilty to two counts of juvenile delinquency related to the federal cybercrimes. Due to his age, he avoided the heavy sentences typically handed down to adults, which could have meant up to 10 years in federal prison and $250,000 in fines. Instead, he was sentenced to six months of house arrest, banned from recreational computer use, required to write letters of apology to the Secretary of Defense and the NASA Administrator, and placed on probation until he turned 18.
However, James later violated the terms of his probation after testing positive for drug use. As a result, the U.S. Marshals Service took him into custody, and he was incarcerated at a federal juvenile correctional facility in Alabama for six months, making him the first juvenile in the United States to be jailed for a cybercrime.
The NASA and Pentagon hacks exposed severe deficiencies in government cybersecurity protocols of the late 1990s. The fact that a teenager could bypass firewalls and download source code meant for the International Space Station served as a pivotal wake-up call, leading to massive overhauls in federal digital security and intrusion detection systems.