Zum Inhalt springen

Gary McKinnon: The UFO Hacker and the Decade-Long Extradition

Zusammenfassung

Between February 2001 and March 2002, Gary McKinnon — a Scottish systems administrator living in North London — hacked into 97 US military and NASA computer systems from his girlfriend’s aunt’s flat. He was looking for evidence of UFO cover-ups and suppressed free energy technology. He left messages on compromised systems describing US foreign policy as “state-sponsored terrorism.” US authorities called it the “biggest military computer hack of all time” and sought his extradition to face charges carrying up to seventy years in prison. Britain spent ten years arguing about whether to hand him over. The case became a referendum on extradition law, prosecutorial proportion, and what a liberal democracy owed its citizens against American legal demands — and McKinnon never spent a day in an American courtroom.

The Intrusions

McKinnon had been interested in UFOs for years before he began hacking. He was convinced, based on readings in fringe literature and testimony from people claiming government insider knowledge, that the US military had made contact with extraterrestrial intelligence and was suppressing both the evidence and associated technology — particularly free energy devices — that would disrupt the fossil fuel industry.

His method was technically simple: he used a tool called RemotelyAnywhere (legitimate remote administration software) and a script that searched for Windows computers with blank administrator passwords. In 2001, many US military networks were running unpatched Windows NT and 2000 systems with no passwords on administrator accounts. McKinnon found them by scanning ranges of IP addresses, connecting through a series of proxy computers to obscure his origin, and logging in.

He accessed systems at the US Army, US Navy, US Air Force, Department of Defense, and NASA. He copied files, installed RemotelyAnywhere for persistent access, and searched for evidence of his theories. He found what he was looking for — or believed he did. He later described seeing a photograph of what appeared to be a large cigar-shaped object above the Earth, accessed on a NASA system, which he interpreted as an extraterrestrial craft. The file was too large to download on his connection before he lost access.

He also left messages. On a US Army computer he wrote: “Your security is crap.” On other systems he posted statements calling US foreign policy “state-sponsored terrorism” and referencing George W. Bush’s response to the September 11 attacks. The messages were not attempts at invisibility.

US authorities estimated the damage at over $700,000 — a figure McKinnon and his lawyers disputed as inflated, arguing that most of the costs attributed to the intrusions reflected preexisting security upgrade work that the military would have needed to do regardless.

Arrest and the Extradition Battle

McKinnon was arrested in March 2002 by the UK’s National Hi-Tech Crime Unit. He admitted the intrusions almost immediately. At the time, he expected to be prosecuted in the UK under the Computer Misuse Act — the British equivalent of the CFAA — and to face a sentence proportionate to what British courts had imposed on similar defendants.

The US Department of Justice had different plans. In November 2002, a federal grand jury in Virginia indicted McKinnon on seven counts of computer-related crimes, with a potential sentence of up to seventy years. The US sought extradition under the UK-US Extradition Treaty of 2003, a treaty that critics noted was substantially asymmetric: the US could request extradition from the UK without presenting prima facie evidence of guilt, while the UK faced a higher evidentiary burden for extradition requests to the US.

The extradition proceedings lasted ten years. The case moved through district courts, the High Court, the Court of Appeal, the House of Lords (later the Supreme Court), and ultimately to the Home Secretary, who had the power to block extradition on human rights grounds.

The Extradition Treaty Asymmetry

The 2003 UK-US Extradition Treaty was signed in the immediate post-9/11 period, when the UK was eager to demonstrate cooperation with American counterterrorism efforts. Critics argued the treaty was more favorable to the US than to Britain: the US needed only to assert that a crime had been committed and that the evidence justified the charge, while the UK had to present prima facie evidence. The McKinnon case made the treaty’s asymmetry politically visible for the first time. By 2010, McKinnon’s case had become the primary political argument for renegotiating the treaty’s terms.

The Asperger’s Defense and Political Mobilization

In 2008, McKinnon was diagnosed with Asperger’s syndrome — a diagnosis he and his lawyers argued should be considered in the extradition decision, given the risk that his condition, combined with the prospect of decades in an American federal prison, created an unacceptable risk of suicide.

The diagnosis converted his case from a legal argument into a humanitarian one. McKinnon’s mother, Janis Sharp, became a tireless public advocate. British celebrities including Sting, David Gilmour (of Pink Floyd), and Julie Christie wrote letters of support. Members of Parliament from multiple parties took up his cause. The case appeared regularly in British newspapers for years.

The combination of the extradition treaty’s perceived unfairness, the disproportionate sentence sought, the Asperger’s diagnosis, and the basic human sympathy for a middle-aged Scottish man who had hacked military computers looking for flying saucers made McKinnon’s case politically toxic. No Home Secretary wanted to be responsible for sending him to an American prison.

Theresa May, as Home Secretary, blocked extradition in October 2012. Her decision cited McKinnon’s Asperger’s diagnosis, the risk of suicide, and the likelihood that extradition would violate his human rights under the European Convention. The US government accepted the decision.

The Asperger’s Diagnosis and Its Legal Weight

The Asperger’s syndrome diagnosis, made in 2008 by Professor Simon Baron-Cohen at Cambridge University’s Autism Research Centre, changed the case’s character fundamentally. Baron-Cohen testified in subsequent proceedings that McKinnon’s obsessive focus on UFO conspiracy theories, his difficulty understanding social norms, and his apparent inability to appreciate the significance of what he was doing were consistent with his diagnosis.

McKinnon’s lawyers argued that extradition to the United States posed a “real risk” of suicide, given his diagnosis and the prospect of facing charges in a foreign jurisdiction with potential sentences that seemed incomprehensible to him. This argument was grounded in European human rights law: Article 3 of the European Convention on Human Rights prohibits treatment that is “inhuman or degrading,” and the European Court of Human Rights had held in the Soering case (1989) that extradition itself could violate Article 3 if the conditions awaiting the individual in the receiving country were severe enough.

The medical evidence was disputed. American psychiatrists retained by the U.S. government argued that McKinnon’s condition was manageable and that extradition would not present an unacceptable risk. British psychiatrists disagreed. The Home Secretary ultimately had to decide which expert evidence to credit — a question that was as much political as medical.

Theresa May was Home Secretary from May 2010. She was under sustained political pressure: by 2012, a petition backing McKinnon had collected over 100,000 signatures, parliamentary debates had been held repeatedly, and the case had become a symbol of British sovereignty vis-à-vis American legal demands. Her October 2012 decision to block extradition cited “the high threshold set by the courts” under Article 3 and concluded that extradition “would give rise to a real risk of [McKinnon’s] suicide.” She simultaneously announced a review of the UK-US extradition treaty’s asymmetry.

The Non-Prosecution

Having blocked extradition, the British government faced an awkward question: would McKinnon be prosecuted in the UK?

The answer turned out to be no. The Computer Misuse Act’s limitation period for some of the relevant offenses had expired. The Crown Prosecution Service reviewed the evidence and in 2012 announced that prosecution in the UK was not in the public interest — partly because the evidence was held in the United States and US authorities were unwilling to share it for a UK prosecution, and partly because the decade-long legal saga had already imposed substantial punishment without conviction.

Gary McKinnon walked free. He has never been tried for the intrusions he committed and admitted.

He subsequently gave occasional interviews describing his continued belief that the US government was concealing evidence of extraterrestrial contact. He had not found definitive proof during his years of hacking. He remained convinced it existed.

Dead End: Extradition Law and the Disproportionality Problem

The McKinnon case exposed a structural tension in transatlantic legal cooperation that the 2003 treaty had not resolved: what happens when the criminal penalties available in one jurisdiction are disproportionate to the offense as understood in the other?

American federal computer crime sentencing could reach seventy years for a combination of charges. British courts had never sentenced a computer misuser to more than a few years. McKinnon’s intrusions — genuine, extensive, and damaging by any measure — would likely have received two to five years in a UK court. The seven decades the US sought was not primarily a reflection of the actual harm caused; it reflected the American system’s practice of charging every available count and seeking the maximum as a negotiating baseline.

The Forum Bar introduced into UK extradition law after the McKinnon case addressed part of this: it allows British courts to decline extradition when the conduct in question is substantially connected to the UK and the interests of justice are better served by prosecution in Britain. The bar has been used in subsequent cases.

The deeper problem was not resolved. The UK-US Extradition Treaty of 2003 remained asymmetric in its evidentiary requirements, a legacy of the post-9/11 political context in which it was negotiated. The parliamentary Joint Committee on Human Rights that reviewed the McKinnon case concluded in 2012 that the treaty created a situation where British citizens were exposed to American prosecution for conduct that British law would treat quite differently — a situation that was, the Committee found, fundamentally inconsistent with the principles of proportionality that underpin both British criminal law and the European Convention.

McKinnon’s case made a principle visible that had been embedded in bureaucratic practice: that extradition treaties written in moments of political urgency inherit the asymmetries of the power relationships that produced them.


📚 Sources