United States v. John

597 F.3d 263, 2010 WL 432405
CourtCourt of Appeals for the Fifth Circuit
DecidedFebruary 10, 2010
Docket08-10459
StatusPublished
Cited by222 cases

This text of 597 F.3d 263 (United States v. John) is published on Counsel Stack Legal Research, covering Court of Appeals for the Fifth Circuit primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook
United States v. John, 597 F.3d 263, 2010 WL 432405 (5th Cir. 2010).

Opinions

OWEN, Circuit Judge:

Dimetriace Eva-Lavon John was found guilty by a jury on all counts of a seven-count indictment arising out of her involvement in a scheme to incur fraudulent charges on accounts held by various Citigroup customers. John challenges her convictions and sentence in this appeal. We affirm the convictions but vacate her sentence and remand for further proceedings.

I

Dimetriace Eva-Lavon John was employed as an account manager at Citigroup for approximately three years. By virtue of her position, she had access to Citigroup’s internal computer system and customer account information contained in it. In September 2005, John provided Leland Riley, her half-brother, with customer account information enabling Riley and other confederates to incur fraudulent charges.

John accessed and printed information pertaining to at least seventy-six corporate customer accounts and provided it to Riley. The information was in the form of either scanned images of checks written by the account holders or printouts of computer screens containing detailed account information. Before he was apprehended, Riley and cohorts used information John had provided to incur fraudulent charges on four different accounts.

A grand jury returned a seven-count indictment against John. Count 1 charged John with conspiracy to commit access device fraud in violation of 18 U.S.C. § 371. Counts 2 through 5 charged John with fraud in connection with an access device and aiding and abetting, in violation of 18 U.S.C. §§ 1029(a)(5) and (2). Counts 6 [270]*270and 7 charged John with exceeding authorized access to a protected computer in violation of 18 U.S.C. §§ 1030(a)(2)(A) and (C). A jury found John guilty on all seven counts.

A Presentence Report (PSR) concluded that the Sentencing Guideline applicable to the conspiracy count was § 2Xl.l(a),1 which provides that the base offense level is that applicable to the substantive offense. The substantive offense underlying the conspiracy count — a violation of 18 U.S.C. § 1029(a)(5) — is governed by § 2B1.1 of the Guidelines, which provides for a base offense level of six. However, in calculating the advisory Guidelines sentencing range, the PSR recommended that the base offense level be increased by 16 levels because the PSR concluded that John intended to cause a loss of approximately $1,451,865. The PSR also determined that John intended to obtain account holders’ personal information and accordingly added two levels pursuant to § 2Bl.l(b)(14)(A)(i)(II). After other adjustments that are not at issue in this appeal, the PSR arrived at a final base offense level of thirty. John had no criminal history, and the resulting advisory Guidelines range of imprisonment was 97-121 months. The district court ultimately sentenced John to 108 months’ imprisonment.

II

John has raised several issues regarding her convictions. Her first contention is that the evidence was insufficient to support her convictions on Counts 6 and 7 under 18 U.S.C. § 1030(a)(2) for exceeding authorized access to Citigroup’s computers. She candidly acknowledges that at trial her counsel failed to renew a motion for acquittal at the close of the evidence and that we therefore may only reverse her convictions on these counts “if there was a ‘manifest miscarriage of justice,’ which would occur if there is no evidence of the defendant’s guilt or ‘the evidence on a key element of the offense was so tenuous that a conviction would be shocking.’ ”2

Whether John’s convictions on Counts 6 and 7 may be sustained depends on the proper interpretation of “exceeds authorized access” as used in § 1030(a)(2) and defined in § 1030(e)(6).

John was convicted of violating § 1030(a)(2), which provides:

(a) Whoever—
(2) intentionally accesses a computer without authorization or exceeds authorized access, and thereby obtains—
(A) information contained in a financial record of a financial institution, or of a card issuer as defined in section 1602(n) of title 15, or contained in a file of a consumer reporting agency on a consumer, as such terms are defined in the Fair Credit Reporting Act (15 U.S.C. 1681 et seq.); ...
shall be punished as provided in subsection (c) of this section.3

The term “exceeds authorized access” is defined in § 1030(e)(6): “the term ‘exceeds authorized access’ means to access a computer with authorization and to use such access to obtain or alter information in the [271]*271computer that the accesser is not entitled so to obtain or alter....”

John argues that she was authorized to use Citigroup’s computers and to view and print information regarding accounts in the course of her official duties. The evidence, she contends, reflects only that she was not permitted to use the information to which she had access to perpetrate a fraud, she could make changes to account information only in compliance with a customer’s request, and she was not permitted to take material she printed regarding accounts from her office building. She asserts that her mental state or motive at the time she accessed or printed account information cannot determine whether she violated 18 U.S.C. § 1030(a)(2). Specifically, she argues that the statute does not prohibit unlawful use of material that she was authorized to access through authorized use of a computer. The statute only prohibits using authorized access to obtain information that she is not entitled to obtain or alter information that she is not entitled to alter, John contends.

We first note that John was not charged in Counts 6 or 7 with altering information in Citigroup’s computer system. She was charged with “exceeding authorized access” and obtaining confidential Citigroup and Home Depot customer account information.

The statute at issue prohibits both accessing a computer “without authorization” and “exeeed[ing] authorized access” to obtain specified information.4 The statute does not define “authorized,” or “authorization,” which is used in the definition of “exceeds authorized access.”5 The question before us is whether “authorized access” or “authorization” may encompass limits placed on the use of information obtained by permitted access to a computer system and data available on that system. We conclude that it may, at least when the user knows or reasonably should know that he or she is not authorized to access a computer and information obtainable from that access in furtherance of or to perpetrate a crime.

Free access — add to your briefcase to read the full text and ask questions with AI

Related

United States v. Rodolfo Rodriguez-Leos
953 F.3d 320 (Fifth Circuit, 2020)
Sandvig v. Sessions
District of Columbia, 2018
United States v. Marcus Hill
Fifth Circuit, 2018
United States v. Kenneth Fairley
880 F.3d 198 (Fifth Circuit, 2018)
United States v. Paul Suarez
879 F.3d 626 (Fifth Circuit, 2018)
United States v. David Nosal
828 F.3d 865 (Ninth Circuit, 2016)
United States v. Kevin Brown
826 F.3d 835 (Fifth Circuit, 2016)
Carlson v. Bioremedi Therapeutic Systems, Inc.
822 F.3d 194 (Fifth Circuit, 2016)
People of Michigan v. Gregory Lamont Glenn Jr
Michigan Court of Appeals, 2016
United States v. Jason Scott
821 F.3d 562 (Fifth Circuit, 2016)
United States v. Reynaldo Soto
819 F.3d 213 (Fifth Circuit, 2016)
United States v. Juan Lorenzo-Zepeta
638 F. App'x 367 (Fifth Circuit, 2016)
United States v. Fabian Gonzalez-Loya
639 F. App'x 1023 (Fifth Circuit, 2016)

Cite This Page — Counsel Stack

Bluebook (online)
597 F.3d 263, 2010 WL 432405, Counsel Stack Legal Research, https://law.counselstack.com/opinion/united-states-v-john-ca5-2010.