How a Judge in India Prevented Americans From Seeing a Blockbuster Report
Free speech on the internet took a huge hit when the news agency Reuters took down an important hacking investigation to comply with an overseas legal challenge.
www.politico.com
POLITICO illustration/Photos by Getty Images, iStock
How a Judge in India Prevented Americans From Seeing a Blockbuster Report
Free speech on the internet took a huge hit when the news agency Reuters took down an important hacking investigation to comply with an overseas legal challenge.
By MICHAEL SCHAFFER
01/19/2024 05:00 AM EST
Michael Schaffer is a senior editor and columnist at POLITICO Magazine. He has covered national and local politics for over twenty years and spent seven years as editor-in-chief of the Washingtonian. His Capital City column chronicles the inside conversations and big trends shaping Washington politics.
Two months ago, the news agency Reuters published an eye-opening cybersecurity investigation bylined by Washington-based reporters and full of news of interest to Americans. But Americans aren’t allowed to read the story anymore — by order of a court in India.
It’s a disturbing turn of events that couldn’t have happened in the pre-internet era, when publishing — and censorship — were largely local affairs.
But what’s going on is not just a tale of a foreign power interfering with the ability of Americans to browse the web as we please. The campaign against the Reuters report has also enlisted some heavy-duty Beltway players.
To back up a bit: On Nov. 16, the wire service published “How an Indian Startup Hacked the World,” an investigation based on hundreds of interviews, thousands of pages of documents and research from multiple cybersecurity firms. The report detailed how a company called Appin allegedly turned itself into a mercenary hacking outfit, targeting political activists, military officials and businesspeople on behalf of shadowy clients from around the world.
Appin and its co-founder, Rajat Khare, strongly denied the allegations. He told Reuters through an attorney that he was in the business of defending against cyberattacks, not perpetuating them.
Nonetheless, the report landed with a splash. It was quickly aggregated in outlets like Lawfare and Wired and passed around on social media.
You didn’t have to be a cybersecurity geek to want to click. The story was full of wild accounts of alleged hacks involving a Dominican newspaper, a Russian oligarch and an Israeli private eye. For Washington types, there were also allegations of hacks against U.S. victims including a Rwandan exile; security executive Kristi Rogers, who is married to former Michigan GOP Rep. and current Senate candidate Mike Rogers; and the leadership of a Native American tribe amidst a lucrative real estate dispute.
And then, last month, the whole thing abruptly vanished from Reuters’ website — and from many of the outlets that had linked to it.
Online, the roughly 6,000-word report was replaced with a terse statement announcing that the article had been “temporarily removed” in order “to comply with a preliminary court order issued on Dec. 4, 2023, in a district court in New Delhi, India.” The four-paragraph editor’s note said that “Reuters stands by its reporting and plans to appeal the decision.”
While the process plays out, though, the original story is offline — not just in India, but around the world.
“Reuters complied with the preliminary court order, which required only that we temporarily remove the story from the Reuters.com website, but not from other platforms,” a Reuters spokesperson told me.
The sweeping order comes as a result of legal action by a group purporting to represent Appin’s digital training centers — who say their students’ reputations are damaged by Reuters’ allegedly false reporting. Last month, Additional District Judge Rakesh Kumar Singh ruled that the story should be suppressed pending trial.
“I am of the opinion that even if the defendants for some period do not retain the article on the website, and on that account they suffer any market value, they can be ultimately compensated by money from the plaintiff, but the retention of such material on the website, if allowed… may have devastating effect on the general students population of India,” Singh wrote.
In India — or any other country — the act of blocking foreign reporting was once simple: Impound some magazines at the airport and call it a day. Local civil libertarians might be infuriated, but the confiscation wouldn’t hamper readers beyond the national border.
Now, though, publishing is global, and keeping things published online is an ongoing choice. Instead of banning disfavored pieces of newsprint in one particular country, judges are apt to demand that things be removed from global websites. A vast organization like Reuters, with major interests in India that could be sanctioned, not to mention local employees who could get in legal trouble, doesn’t have the luxury of blowing off the judge.
“If you are the Iowa Daily Beagle, and you publish a story that upsets some company in India, that company can go to an Indian court and get whatever injunction they want,” said Charles Glasser, who spent 12 years as the global media counsel for Bloomberg News and is the author of a book on international libel law. “But if the Iowa Daily Beagle has no assets in India and does no business in India, they can’t do much. It becomes more of an issue for international publishers, like Reuters. They certainly have resources there, and they are subject to the jurisdiction of the Indian court.”
Of course, Glasser notes, publishers have the ability to geofence content, making it so that an American reader can access a certain page while an Indian reader cannot. But that can backfire. Particularly in a country with historic reasons to be prickly about Western condescension, a judge is likely to take it as a sign of disrespect if an order is ignored beyond the border — not a good move if you are facing trial.
The upshot: Readers in America, where prior restraint is forbidden and where courts won’t enforce foreign rulings that violate the First Amendment, are blocked from reading a story based on a legal complaint that would be tossed out of most American courts.
That’s not the only way the case is resonating in the U.S.
Readers looking to find the gist of the story elsewhere might also have trouble. Wired removed it from a weekly roundup of cybersecurity news, appending a note to say the move was temporary and came as a result of Reuters having taken it down. Lawfare, the influential national security site published in cooperation with the Brookings Institution, also unpublished its excerpts from the piece, replacing block quotes with words made up entirely of the letter “X.”
It wasn’t just the result of one New Delhi court. Several of the U.S. platforms who later removed content became aware of the disputed allegations not because they were following Indian legal news, but after hearing from Khare’s American firm, Clare Locke. The prominent libel-law outfit is based in the Washington suburbs and well-known for representing clients like former GOP vice presidential nominee Sarah Palin in her case against The New York Times. The firm has represented Khare, including going back and forth with Reuters prior to publication.
“Mr. Khare does not comment on legal proceedings, but he defends himself judicially in all relevant jurisdictions against any attacks that target him and illegitimately damage his reputation,” Clare Locke partner Joe Oliveri said in a statement. “Mr. Khare has dedicated much of his career to the field of information technology security — that is, cyber-defense and the prevention of illicit hacking — and it is truly unfortunate that he has found himself the subject of false accusations of involvement in a ‘hack-for hire’ industry or supporting or engaging in illicit hacking or cyberactivities. Those accusations are categorically false. They have been rejected by courts and regulatory bodies and debunked by experts. And Mr. Khare will not hesitate to continue to take steps to enforce his rights and protect his reputation from such false attacks.”
That kind of language — combined with the knowledge that Khare has taken action against hack-for-hire allegations in the U.K., Switzerland and elsewhere — is pretty daunting, especially after Reuters pulled down its story.
“My judgment was it would be imprudent for us to continue to quote from and link to a Reuters article that they weren’t standing by,” Lawfare editor Benjamin Wittes told me. “But I didn’t want to disappear the article because I had no way to assess the integrity of the Reuters reporting.”