Another Terrorist Watchlist Leaks, This One Compiled By Thomson Reuters

from the and-by-their-lists-you-shall-know-them dept

Another terrorism-related database has leaked — this one produced by an entity best known for its news agency. Security researcher Chris Vickery first unveiled it on Reddit.

A few years ago, Thomson Reuters purchased a company for $530 million. Part of this deal included a global database of “heightened-risk individuals” called World-Check that Thomson Reuters maintains to this day. According to Vice.com, World-Check is used by over 300 government and intelligence agencies, 49 of the 50 biggest banks, and 9 of the top 10 global law firms. The current-day version of the database contains, among other categories, a blacklist of 93,000 individuals suspected of having ties to terrorism.

I have obtained a copy of the World-Check database from mid-2014.

No hacking was involved in my acquisition of this data. I would call it more of a leak than anything, although not directly from Thomson Reuters. The exact details behind that can be shared at a later time.

Thomson Reuters’ “global screening solution” pulls from hundreds of other databases, including sanctions lists, law enforcement lists, and compiled data from regulatory agencies. The collection doesn’t cause too many problems in the United States, but as Joseph Cox of Motherboard points out, it’s a bit more a problem when deployed in Europe.

Although World-Check is based on public information, European privacy laws impose strong restrictions on the collection, storage, and publication of information about individuals. For that reason, the database can only be used for screening purposes by customers vetted by Thomson Reuters.

The end result of all this data is a blacklist of 93,000 individuals with suspected ties to terrorism. Like other terrorism-related databases, the Thomson Reuters list also draws some interesting conclusions about certain organizations.

However, World-Check can sometimes flag those not involved in crime. As VICE News previously found, the database has listed major charities, activists, and mainstream religious institutions under the label of “terrorism.” Those include the Council on American-Islamic Relations’ (CAIR) executive director Nihad Awad; Liberal Democrat politician Maajid Nawaz, who founded the counter-extremism organisation Quilliam, and former World Bank and Bank of England advisor Mohamed Iqbal Asaria. None of these people have ever faced terrorism charges, VICE News adds.

Thomson Reuters has now closed the leak — which, according to a statement released to Motherboard, appears to have originated outside of the company, possibly by one its contractors.

After the publication of this article, a spokesperson from Thomson Reuters wrote in an email that the company had contacted the third party responsible for the leak and that they had taken down the information. “We have also spoken to the third party to ensure there will be no repetition of this unacceptable incident,” the spokesperson added.

It also spoke to Vickery, raising the somewhat dubious defense that everyone else is doing it, why not us?

One important point that they would like to highlight (and something I’ll agree with): Thomson Reuters is not the only company gathering this kind of data and putting together this type of database. They may be a leader in the industry, but it’s not fair to vilify them as if they were the only company in the market.

That statement of collective guilt doesn’t do much to answer Vickery’s question raised during deliberations about leaking the list publicly:

At the very least, this should jump-start a little online conversation regarding the appropriateness of having private entities maintain lists utilized by government agencies and banks.

As we’ve seen from other terrorism blacklists, the US government is no better at drawing conclusions or checking its lists for false positives on a regular basis. The fact that Thomson Reuters database pulls from hundreds of sources is probably better than the FBI/DHS method of shrugging people onto terrorist watchlists based on hunches, surnames, or camera ownership. It’s still disturbing that a private entity can control access to various services around the world by selling a watchlist to corporate customers, but there’s no reason to believe this private blacklist is any worse than those compiled by various governments.

Filed Under: , , ,
Companies: thomson reuters

Rate this comment as insightful
Rate this comment as funny
You have rated this comment as insightful
You have rated this comment as funny
Flag this comment as abusive/trolling/spam
You have flagged this comment
The first word has already been claimed
The last word has already been claimed
Insightful Lightbulb icon Funny Laughing icon Abusive/trolling/spam Flag icon Insightful badge Lightbulb icon Funny badge Laughing icon Comments icon

Comments on “Another Terrorist Watchlist Leaks, This One Compiled By Thomson Reuters”

Subscribe: RSS Leave a comment
22 Comments
DannyB (profile) says:

Questions

What do you have to do to get off one of these lists?

Does it work like McCarthy-ism? If you are linked to someone on these databases, you end up on them yourself? Repeat until everyone is on the list.

If Thomson Reuters is not the only ones doing it, does that make it okay? (ISIS is not the only group that tortures people — the US do it too, so it’s all okay!)

DannyB (profile) says:

Closing the Leak

I can understand why a media organization like Thomson Reuters may not be familiar with how digital information works in the 21st century, so I’ll make allowance.

Once someone has a copy, “closing the leak” is like closing the barn door after the ostrich has run out.

Talking to contractors and third parties does not actually help much if at all.

However I can understand how that would allow Thomson Reuters to feel like they have corrected a problem and that everything is okay now.

Suggestion: next step, try asking the internet to take down all copies of that information. Please.

Anonymous Coward says:

Wikipedia
“Thomson Reuters Corporation (/ˈrɔɪtərz/) is a major multinational mass media and information firm founded in Toronto, Ontario, Canada. Its operations are headquartered at 3 Times Square in Manhattan, New York City while its legal domicile offices are located at 333 Bay Street in Downtown Toronto.”

Above
blacklist of 93,000 individuals

This sounds very much like a class action law suit by 93,000 individuals who are being libellous linked to criminal activity by a private company.

Personanongrata says:

Black Lists and Watch Lists are Worthless

It’s still disturbing that a private entity can control access to various services around the world by selling a watchlist to corporate customers, but there’s no reason to believe this private blacklist is any worse than those compiled by various governments.

All black/watch lists are equally vile.

Their worth is apparently is counted in dollars/cents not in terrorists apprehended.

Anonymous Coward says:

And then how long before banks base their lending decisions on one of these lists, employers hiring based on these lists, service companies servicing based on these lists………simply for the virtue of being on a list that in time, eventually the bleeming daly lama will be on giving how the requirements to be on a list will keep on expanding, and then used as the tool its eventually going to become.

“Right, that person telling the truth is a nousance, yet our list doesnt cover it, he’s a butcher, so we’ll “advertise” that the guys a killer, and leave out the butcher part……….see, not lieing……simply ommiting and blemishing the truth”

Mass media have a duty to tell the truth considering the considerable sway they have over the things thousands of people think about while viewing them, and folks need to recognise the voluntary form of hypnosis……..im not saying get rid of it……there just has to be the awareness of it

Im rambling on………ill leave this here

Add Your Comment

Your email address will not be published. Required fields are marked *

Have a Techdirt Account? Sign in now. Want one? Register here

Comment Options:

Make this the or (get credits or sign in to see balance) what's this?

What's this?

Techdirt community members with Techdirt Credits can spotlight a comment as either the "First Word" or "Last Word" on a particular comment thread. Credits can be purchased at the Techdirt Insider Shop »

Follow Techdirt

Techdirt Daily Newsletter

Ctrl-Alt-Speech

A weekly news podcast from
Mike Masnick & Ben Whitelaw

Subscribe now to Ctrl-Alt-Speech »
Techdirt Deals
Techdirt Insider Discord
The latest chatter on the Techdirt Insider Discord channel...
Loading...