Within Damage Claims
What Happened to 2,455 Army User Accounts?
Authorities alleged that McKinnon erased 2,455 Army access accounts, causing connected computers to reboot or become unusable.
On this page
- How the account control computer worked
- The failures prosecutors linked to deletion
- Why attribution remained contested
Page outline Jump by section
Introduction
One of the most specific damage allegations in the prosecution of Gary McKinnon was that he deleted 2,455 user accounts from a United States Army computer responsible for controlling access to an Army network. According to US authorities, this was not simply the removal of individual usernames: they alleged that deleting the accounts from a central administrative system caused connected computers to reboot and become unusable until administrators restored the affected directory information. McKinnon admitted accessing US military computers without authorisation but consistently denied intentionally causing damage. Because his extradition case never proceeded to a criminal trial in the United States, the allegation was never tested through cross-examination or a verdict on the evidence.[UK Parliament]publications.parliament.ukUK Parliament House of LordsUK ParliamentHouse of Lords - Mckinnon V Government of The United States of America and AnotherJuly 30, 2008…
How the account-control computer worked
The allegation centred on a single administrative computer, not on thousands of separate machines being individually compromised.
Modern military and enterprise Windows networks commonly rely on central directory or account-management services. Rather than storing every user’s credentials locally on each workstation, a central server maintains user accounts, permissions and authentication data. Workstations consult that central service whenever users log in or when the operating system validates access to network resources.
In practical terms, this architecture means that compromising one privileged administrative system can have consequences far beyond the machine initially accessed. If administrative accounts or directory records are deleted from the central management system, users may be unable to authenticate, security policies can fail, and dependent computers may repeatedly attempt to reconnect or reboot while waiting for valid account information. Restoring service generally requires rebuilding or recovering the directory database rather than simply restarting individual computers.
The House of Lords’ summary of the prosecution case described the affected machine as “a US Army computer that controlled access to an Army computer network”, reflecting this centralised role rather than suggesting that thousands of separate computers were independently hacked.[UK Parliament]publications.parliament.ukUK Parliament House of LordsUK ParliamentHouse of Lords - Mckinnon V Government of The United States of America and AnotherJuly 30, 2008…
The failures prosecutors linked to the deletion
US prosecutors alleged a direct chain of events:
- McKinnon obtained administrative privileges on Army systems.
- He deleted 2,455 user accounts from the central access-control computer.
- Computers dependent on those accounts began rebooting and became inoperable.
- Administrators were required to restore the deleted account information before normal operation could resume. Department of Justice
This allegation differs from another Army-related accusation in the McKinnon case involving deletion of operating system files from computers supporting the Military District of Washington network. The account-deletion allegation concerns identity and access management, whereas the operating-system allegation concerns removal of critical system files. Although both appeared within the same prosecution narrative, they describe different technical mechanisms for disrupting network operations. UK Parliament
From a systems administration perspective, deleting centrally managed user accounts can produce widespread disruption without physically damaging hardware. Networked computers may fail authentication checks, lose access to shared resources or repeatedly restart while attempting to apply security policies. Such effects arise because many machines depend on the same directory service rather than maintaining independent copies of user information.
Why attribution remained contested
The existence of the allegation itself is well documented. Its factual accuracy, however, remained legally unresolved.
The House of Lords accepted the American allegations as sufficient for extradition proceedings but emphasised that extradition hearings are not criminal trials determining guilt. Their purpose was to decide whether the legal requirements for extradition were met, not whether every alleged act of damage had been proved beyond reasonable doubt. UK Parliament
McKinnon acknowledged unauthorised access to military and NASA computers but denied deliberately destroying systems. In interviews and public statements he portrayed himself as searching for information relating to UFOs, advanced technology and government secrecy rather than attempting to sabotage military operations. His position was that he had not intentionally caused the extensive operational damage described by prosecutors. GOV.UK
Because extradition was ultimately halted by the UK government on human-rights grounds, no US criminal trial occurred. As a result:
- the prosecution never presented its forensic evidence before a jury;
- defence experts never cross-examined the government’s technical witnesses;
- no judicial findings determined whether McKinnon personally deleted the 2,455 accounts or whether the resulting outages occurred exactly as alleged.
The allegation therefore remains an important element of the prosecution’s case rather than a fact established through a completed criminal conviction. GOV.UK
Why this allegation mattered
Among the various damage allegations, the claimed deletion of 2,455 Army user accounts illustrated an important point about network administration: a single privileged administrative system can become a critical point of failure.
The prosecution relied on this allegation to argue that the consequences of the intrusion extended beyond viewing sensitive information. Instead, it presented the incident as an example of how deleting centrally managed authentication data could disable large numbers of dependent computers and require substantial recovery work. That distinction helped support the broader claim that the case involved operational damage to defence networks rather than merely unauthorised access. Department of Justice
Amazon book picks
Further Reading
Books and field guides related to What Happened to 2,455 Army User Accounts?. Use these as the next step if you want deeper reading beyond the article.
Active Directory
Provides information on the features, functions, and implementation of Active Directory, covering such topics as management tools, search...
The Practice of System and Network Administration
With 28 new chapters, the third edition of The Practice of System and Network Administration innovates yet again! Revised with thousands...
Incident Response & Computer Forensics
The definitive guide to incident response--updated for the first time in a decade! Thoroughly revised to cover the latest and most effect...
eBay marketplace picks
Marketplace Samples
Live-tested eBay searches with available results related to this page.
Selected fromnetwork security sticker oneBay.co.uk.
Endnotes
1.
Source: publications.parliament.uk
Title: UK Parliament House of Lords
Link:https://publications.parliament.uk/pa/ld200708/ldjudgmt/jd080730/mckinn-1.htm
Source snippet
UK ParliamentHouse of Lords - Mckinnon V Government of The United States of America and AnotherJuly 30, 2008...
Published: July 30, 2008
3.
Source: publications.parliament.uk
Title: UK Parliament Microsoft Word
Link:https://publications.parliament.uk/pa/ld200708/ldjudgmt/jd080730/mckinn.pdf
Source snippet
UK ParliamentMicrosoft Word - McKinnon _Appellant_ v Government of the United States of America _Respondents_ and another.doc...
4.
Source: GOV.UK
Title: Latest on Gary [Mc Kinnon case]({{ ‘mc-kinnon-case/’ | relative_url }})
Link:https://www.gov.uk/government/news/latest-on-gary-mckinnon-case
Source snippet
Latest on Gary McKinnon case - GOV.UKNovember 4, 2010...
Published: November 4, 2010
5.
Source: justice.gov
Link:https://www.justice.gov/archive/criminal/cybercrime/press-releases/2002/mckinnonIndict2.htm
Additional References
6.
Source: arstechnica.com
Title: U K halts extradition of accused hacker over suicide concerns
Link:https://arstechnica.com/tech-policy/2012/10/uk-halts-extradition-of-accused-hacker-over-suicide-concerns/
Source snippet
Prosecutors in the UK will now have the option to bring charges against him under domestic laws. McKinnon’s mother, Janis Sharp, was deli...
7.
Source: vlex.co.uk
Title: Mc Kinnon v United States of America
Link:https://vlex.co.uk/vid/mckinnon-v-usa-818719549
Source snippet
McKinnon v United States of America - vLex United KingdomJuly 30, 2008 — MCKINNON V UNITED STATES OF AMERICA [Jurisdiction]({{ 'jurisdiction/' | relative_url }}) | England & Wal...
Published: July 30, 2008
8.
Source: spectrum.ieee.org
Title: the autistic hacker
Link:https://spectrum.ieee.org/the-autistic-hacker
Source snippet
The U.S. Department of Justice hasn’t publicly discussed how it became aware of McKinnon, but he believes his intrusion was detected when...
9.
Source: youtube.com
Title: Hacking for UFOs and fighting for his life. Who is Gary Mc Kinnon? | Nord VPN
Link:https://www.youtube.com/watch?v=OImdnvQx7sQ
Source snippet
British Hacker Escapes Trial after hacking Military and NASA Computers...
10.
Source: youtube.com
Title: British Hacker Escapes Trial after hacking Military and NASA Computers
Link:https://www.youtube.com/watch?v=jWitx2r3Pmk
Source snippet
Ancient Aliens: Hacking NASA Secrets (Season 12, Episode 9) | History...
11.
Source: setiathome.berkeley.edu
Title: forum thread
Link:https://setiathome.berkeley.edu/forum_thread.php?id=69727
Source snippet
McKinnonOctober 16, 2012 — * * * ID: 1295989 · OzzFan Volunteer tester Image: Avatar Send message Joined: 9 Apr 02 Posts: 15692 Credit...
Published: October 16, 2012
12.
Source: setiathome.ssl.berkeley.edu
Title: forum thread
Link:https://setiathome.ssl.berkeley.edu/forum_thread.php?id=69727&postid=1296314
Source snippet
McKinnonOctober 17, 2012 — Joined: 9 Apr 02 Posts: 15692 Credit: 84,761,841 RAC: 28 Image: United States Image: Top 25% in average credit...
Published: October 17, 2012
13.
Source: youtube.com
Title: The Man Who Hacked the U.S. Government
Link:https://www.youtube.com/watch?v=ND0zQX1rGdg
Source snippet
Hacking for UFOs and fighting for his life. Who is Gary McKinnon? | NordVPN...
14.
Source: sooperkanoon.com
Link:https://sooperkanoon.com/case/amp/945113/mckinnon-appellant-vs-government-respondents
15.
Source: youtube.com
Title: Ancient Aliens: Hacking NASA Secrets (Season 12, Episode 9) | History
Link:https://www.youtube.com/watch?v=20rWFDfh68Y
Source snippet
Gary McKinnon wins extradition battle...