Case Detail
Case Title | WALSTON v. UNITED STATES DEPARTMENT OF DEFENSE | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
District | District of Columbia | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
City | Washington, DC | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Case Number | 1:2015cv02202 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Date Filed | 2015-12-18 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Date Closed | 2018-03-09 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Judge | Judge Trevor N. McFadden | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Plaintiff | LINDA P. WALSTON | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Case Description | Linda Walston discovered that her personal computer had been hacked and traced the IP address to the Department of Defense's Network Information Center. She submitted a complaint to DOD's Office of Inspector General and her complaint was referred to the Inspector General at the Defense Information Systems Agency. Walston submitted a FOIA request to DISA for all records related to her complaint. DISA responded to part of her request and Walston filed an appeal as to that decision. After hearing nothing further about the resolution of her appeal, Walston filed suit. Complaint issues: Failure to respond within statutory time limit, Litigation - Attorney's fees | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Defendant | UNITED STATES DEPARTMENT OF DEFENSE | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Defendant | DEFENSE INFORMATION SYSTEMS AGENCY | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Documents | Docket Complaint Complaint attachment 1 Complaint attachment 2 Complaint attachment 3 Complaint attachment 4 Complaint attachment 5 Opinion/Order [16] FOIA Project Annotation: Judge Emmet Sullivan has ruled that the Department of Defense has not shown that it conducted an adequate search for records concerning Linda Walston's request for records concerning whether or not the Defense Information Systems Agency had hacked her computer. Walston discovered her personal computer had been hacked several times between 2010 and 2014. A computer forensics specialist Walston hired to fix her computer suggested to her that DISA might have been responsible for the hacking. As a result, Walston filed a complaint with the Defense Department's Inspector General, alleging that DISA had hacked her computer. She then filed a FOIA request for records concerning the investigation of her complaint. DISA responded with a redacted memo from DISA OIG to DOD OIG concluding Walston's allegations were unfounded and a report providing analysis for that determination. After filing an administrative appeal, Walston filed suit. DISA then disclosed 13 pages of emails among DISA analysts discussing their analyses of her complaint and another 32 pages of administrative documents and documents that Walston had submitted to DISA. Walston claimed the agency had failed to conduct an adequate search. Sullivan indicated that the agency's two affidavits went some way to explain the agency's search, but found they still fell short of what was legally required. He noted that "nowhere does [the agency's affidavit] state that the electronic database, the shared drive, and the investigators' email files constitute the entire universe of files likely to contain responsive materials. The omission of the 'necessary' statement is all the more troubling because it appears that investigative materials in the DISA OIG database might be located in the 'primary location' in Maryland or in the 'decentralized location' in Illinois. . .Without the 'necessary' statement that the entire universe of files likely to contain responsive records was searched, the Court is foreclosed from granting summary judgment as to the adequacy of DISA OIG's search." He also faulted the agency for failing to identify the keywords used in its searches. He noted that "without a complete list of the search terms in response to Ms. Walston's FOIA request, the Court is unable to conclude that DISA OIG's search was adequate." Sullivan agreed with the agency's redactions under Exemption 5 (privileges) and Exemption 6 (invasion of privacy). Agreeing that an email was protected by the attorney-client privilege, Sullivan pointed out that "in the email exchange, the analyst asks the attorney a legal question and the attorney responds, in turn, with his legal opinion. The analyst and the attorney intended to communicate in confidence."
Opinion/Order [20]Issues: Adequacy - Search FOIA Project Annotation: Judge Trevor McFadden has ruled that the Defense Department conducted an adequate search for a subsequent series of requests Linda Walston sent to several DOD computer-security components concerning the agency's investigation of an incident in which Walston's personal computer was found to have been hacked from an IP address from the Defense Information Systems Agency. Judge Emmet Sullivan had ruled on Walston's earlier request, but found the agency had not shown that it searched all locations likely to have responsive records. After Walston submitted the second batch of requests, Sullivan consolidated the cases. McFadden found the agency had now remedied the deficiency in its explanation to Sullivan. Walton argued that the agency's search in response to her second requests was insufficient. But McFadden explained that "Defendants aver that queries [to other components] do not create any records and that the results of the queries were documented in emails that have been identified and produced after searching for records containing Ms. Walston's last name and case number. Ms. Walston's speculation that other queries may have taken place and might have produced records that would be identified if the Defendant used certain IP addresses and search terms is insufficient to rebut the Defendants' explanation of the sufficiency of their searches."
Issues: Adequacy - Search | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
User-contributed Documents | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Docket Events (Hide) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|