2 arrested in AOL spam scheme

NEW YORK -- An America Online software engineer stole a list of 92 million customer screen names that was eventually used to send massive amounts of e-mail spam, federal prosecutors said yesterday.

Jason Smathers, 24, was arrested at his home in Harpers Ferry, W.Va., and was charged with conspiracy.

Smathers, working at AOL offices in Dulles, Va., stole the list and sold it to a Las Vegas man, Sean Dunaway, who used it to promote an Internet gambling operation and sold it to spammers, a criminal complaint said.

Dunaway, 21, also was arrested at his home and was charged with conspiracy.

Lawyers for the men were not immediately available to comment, but prosecutors in New York said both were to appear in federal courts near their homes yesterday -- Smathers in Virginia and Dunaway in Las Vegas.

If convicted, each man could face up to five years in prison and at least $250,000 in fines.

Smathers was not authorized to have access to the screen name list, which is kept in Dulles, but used another employee's access code last year to steal it, prosecutors said.

Smathers compiled a list that also included customer ZIP codes and credit card types, prosecutors said.

AOL said it did not appear that Smathers had gained access to credit card numbers, which are kept in a separate facility.

''We deeply regret what has taken place and are thoroughly reviewing and strengthening our internal procedures as a result of this investigation and arrest," AOL spokesman Nicholas Graham said.

Prosecutors did not immediately say how much they allege Dunaway paid Smathers for the list, but they said Dunaway later paid him $100,000 for an updated version of it. 

© Copyright 2004 The New York Times Company