Within Damage Claims
Did Nine Deleted Files Disable 2,000 Military Computers?
US prosecutors said deleted system files on nine computers shut a Washington military network serving more than 2,000 machines for 24 hours.
On this page
- What prosecutors said was deleted
- How the shutdown allegedly spread
- What the public record does not prove
Page outline Jump by section
Introduction
One of the most frequently cited damage allegations in the prosecution of Gary McKinnon concerns the claim that deleting critical files from just nine computers caused the US Army’s Military District of Washington (MDW) network—serving more than 2,000 computers—to become unavailable for approximately 24 hours. This allegation became a central example used by US prosecutors to argue that McKinnon’s actions went beyond unauthorised access and amounted to operational sabotage. At the same time, it is also one of the allegations that was never tested in a criminal trial, leaving the public record largely dependent on indictments, court summaries prepared for extradition proceedings, and official government statements rather than adversarial evidence.
The significance of this claim lies not only in the alleged disruption itself but in what it represented. If accurate, it showed that apparently small changes to a handful of systems could cascade across a large military network. If overstated, it illustrates the limits of relying solely on prosecution summaries when no trial establishes the underlying facts.
What prosecutors said was deleted
The allegation appears consistently across the US indictment, the UK extradition litigation, and later government statements.
According to the prosecution, McKinnon gained administrative access to computers within the Military District of Washington network and deleted “critical operating system files” from nine computers. Prosecutors argued that these files were essential for normal operation and that their removal disabled the affected systems. More importantly, they alleged that the failures propagated through the wider network, shutting down the entire Military District of Washington network of more than 2,000 computers for approximately 24 hours and significantly disrupting government functions.[Department of Justice]justice.govDepartment of JusticeLondon, England Hacker Indicted Under Computer Fraud and Abuse Act For Accessing Military Computers (November 12, 20…
The House of Lords judgment, summarising the prosecution case for extradition, described the allegation in almost identical terms:
- critical operating-system files were deleted from nine computers;
- the deletion allegedly shut down the Military District of Washington network;
- the network served more than 2,000 computers;
- the outage allegedly lasted 24 hours; and
- government operations were said to have been significantly disrupted.[UK Parliament]publications.parliament.ukUK Parliament House of LordsUK ParliamentHouse of Lords - Mckinnon V Government of The United States of America and Another…
Although these facts were repeated in judicial decisions, the courts were recounting the American allegations rather than making factual findings after hearing evidence.
How the shutdown allegedly spread
At first glance, the allegation appears disproportionate: nine affected computers causing disruption to more than 2,000 machines. However, prosecutors did not claim that all 2,000 computers were individually damaged.
Instead, their theory depended on the architecture of military computer networks.
The indictment alleged that the compromised machines occupied important positions within the Military District of Washington infrastructure rather than functioning as isolated desktop computers. Deleting operating-system files from network servers or other critical infrastructure could prevent authentication, file services or network management from functioning normally, making large numbers of connected systems effectively unusable even if those individual machines remained physically intact.[Department of Justice]justice.govDepartment of JusticeLondon, England Hacker Indicted Under Computer Fraud and Abuse Act For Accessing Military Computers (November 12, 20…
This distinction matters because computer-crime statutes generally treat loss of system availability as damage, even where hardware survives and deleted software can eventually be restored.
Publicly available court documents, however, do not identify:
- precisely which nine computers were affected;
- the specific operating-system files allegedly deleted;
- the exact network topology involved; or
- the technical mechanism by which the outage propagated.
Those details have never been released in sufficient depth to permit independent technical reconstruction of the incident.
Why the reported duration varies
Readers sometimes encounter different versions of the same allegation.
The House of Lords judgment, later Home Office summaries, and many news accounts describe a 24-hour shutdown affecting more than 2,000 computers.[UK Parliament]publications.parliament.ukUK Parliament House of LordsUK ParliamentHouse of Lords - Mckinnon V Government of The United States of America and Another…
The original 2002 Department of Justice announcement, however, stated that McKinnon caused a Washington-area military network to shut down, resulting in the loss of internet access and email service to approximately 2,000 users for three days.[Department of Justice]justice.govDepartment of JusticeLondon, England Hacker Indicted Under Computer Fraud and Abuse Act For Accessing Military Computers (November 12, 20…
The publicly available record does not explain this discrepancy.
Possible explanations include:
- investigators refining the allegation during later proceedings;
- different measurements of outage versus restoration;
- distinctions between complete network shutdown and the restoration of all services; or
- simple differences in how prosecutors summarised the same event.
No publicly available judicial finding resolves which duration most accurately reflects what occurred.
What the public record does not prove
The Military District of Washington allegation became one of the prosecution’s strongest examples of operational damage, yet important evidential gaps remain.
First, no criminal trial examined the government’s technical evidence through expert testimony or cross-examination. The extradition proceedings assumed, for procedural purposes, that the prosecution case was capable of supporting criminal charges if proved, rather than determining whether every allegation had in fact been proved.[UK Parliament]publications.parliament.ukUK Parliament House of LordsUK ParliamentHouse of Lords - Mckinnon V Government of The United States of America and Another…
Second, the detailed forensic evidence underlying the allegation has not entered the public domain. While prosecutors consistently referred to deleted operating-system files, they have not publicly released forensic reports identifying the files, explaining precisely how their deletion disabled the network, or documenting the recovery process.
Third, McKinnon admitted obtaining unauthorised access to US government computers but disputed deliberately causing serious damage. His public account portrayed himself as searching for information about UFOs and advanced technology rather than attempting to sabotage military systems. That denial does not itself disprove the prosecution’s allegations, but it means the central factual dispute was never resolved by a verdict after contested evidence.
Why this allegation became so important
Among the numerous damage claims in the McKinnon prosecution, the Military District of Washington outage stood out because it transformed the narrative from unauthorised access into alleged operational interference with military infrastructure.
Unlike allegations involving copied passwords or viewed files, the claimed shutdown suggested immediate consequences for government operations. It therefore featured prominently in indictments, extradition litigation, parliamentary discussion in the United Kingdom, and official government summaries over many years.[justice.gov]justice.govDepartment of JusticeLondon, England Hacker Indicted Under Computer Fraud and Abuse Act For Accessing Military Computers (November 12, 20…
At the same time, the allegation remains an accusation rather than a judicially established historical fact. The public evidence demonstrates that US prosecutors consistently asserted that deleting critical operating-system files from nine computers disabled a network serving more than 2,000 machines for roughly a day. What the public record does not establish is the complete technical chain of causation or provide a trial-tested determination that those events occurred exactly as alleged.
Amazon book picks
Further Reading
Books and field guides related to Did Nine Deleted Files Disable 2,000 Military Computers?. Use these as the next step if you want deeper reading beyond the article.
The Cuckoo's Egg
This is the true story of how a systems manager at Lawrence Berkeley Lab singlehandedly tracked down and helped capture a computer hacker...
The Practice of System and Network Administration
With 28 new chapters, the third edition of The Practice of System and Network Administration innovates yet again! Revised with thousands...
Incident Response & Computer Forensics
The definitive guide to incident response--updated for the first time in a decade! Thoroughly revised to cover the latest and most effect...
eBay marketplace picks
Marketplace Samples
Live-tested eBay searches with available results related to this page.
Selected frommilitary cyber patch oneBay.co.uk.
Endnotes
1.
Source: justice.gov
Link:https://www.justice.gov/archive/criminal/cybercrime/press-releases/2002/mckinnonIndict.htm
Source snippet
Department of JusticeLondon, England Hacker Indicted Under Computer Fraud and Abuse Act For Accessing Military Computers (November 12, 20...
2.
Source: publications.parliament.uk
Title: UK Parliament House of Lords
Link:https://publications.parliament.uk/pa/ld200708/ldjudgmt/jd080730/mckinn-1.htm
Source snippet
UK ParliamentHouse of Lords - Mckinnon V Government of The United States of America and Another...
3.
Source: publications.parliament.uk
Link:https://publications.parliament.uk/pa/cm200910/cmhansrd/cm091201/debtext/91201-0004.htm
Source snippet
UK ParliamentHouse of Commons Hansard Debates for 01 Dec 2009 (pt 0004)...
4.
Source: justice.gov
Link:https://www.justice.gov/archive/criminal/cybercrime/press-releases/2002/mckinnonIndict2.htm
5.
Source: GOV.UK
Title: Latest on Gary [Mc Kinnon case]({{ ‘mc-kinnon-case/’ | relative_url }})
Link:https://www.gov.uk/government/news/latest-on-gary-mckinnon-case
Source snippet
From: Home Office and The Rt Hon Theresa May...
6.
Source: flyingpenguin.com
Title: Gary Mc Kinnon | flyingpenguin
Link:https://www.flyingpenguin.com/gary-mckinnon/
Additional References
7.
Source: arstechnica.com
Title: U K halts extradition of accused hacker over suicide concerns
Link:https://arstechnica.com/tech-policy/2012/10/uk-halts-extradition-of-accused-hacker-over-suicide-concerns/
Source snippet
Prosecutors in the UK will now have the option to bring charges against him under domestic laws. McKinnon’s mother, Janis Sharp, was deli...
8.
Source: news.slashdot.org
Title: clickclickdrone sends this news from the BBC: “Comp
Link:https://news.slashdot.org/story/12/12/14/166203/no-charges-in-uk-for-gary-mckinnon?sdsrc=rel
Source snippet
Charges In UK For Gary McKinnon - SlashdotDecember 14, 2012 — 41149161 story NO CHARGES IN UK FOR GARY MCKINNON 148 Posted by Soulskill o...
Published: December 14, 2012
9.
Source: theguardian.com
Title: Photograph: Bruno Vincent/Getty Images
Link:https://www.theguardian.com/world/2012/oct/16/gary-mckinnon-timeline-extradition
Source snippet
Gary McKinnon timeline: events leading up to extradition decision | Gary McKinnon | The GuardianOctober 16, 2012 — Image: Gary McKinnon [...
Published: October 16, 2012
10.
Source: itv.com
Link:https://www.itv.com/news/update/2012-10-16/what-is-gary-mckinnon-accused-of
Source snippet
ITV NewsOctober 16, 2012 — US 'DISAPPOINTED' OVER MCKINNON The US has said they are "disappointed" after the Home Secretary Theresa May b...
Published: October 16, 2012
11.
Source: youtube.com
Title: Gary Mc Kinnon will not face prosecution in the UK
Link:https://www.youtube.com/watch?v=viLcoe_xPMU
Source snippet
Hacking for UFOs and fighting for his life. Who is Gary McKinnon? | NordVPN NordVPN · 29K views British Hacker Escapes Trial after hackin...
12.
Source: youtube.com
Title: British Hacker Escapes Trial after hacking Military and NASA Computers
Link:https://www.youtube.com/watch?v=jWitx2r3Pmk
Source snippet
Hacking for UFOs and fighting for his life. Who is Gary McKinnon? | NordVPN...
13.
Source: sooperkanoon.com
Link:https://sooperkanoon.com/case/amp/945113/mckinnon-appellant-vs-government-respondents
14.
Source: youtube.com
Title: Hacking for UFOs and fighting for his life. Who is Gary Mc Kinnon? | Nord VPN
Link:https://www.youtube.com/watch?v=OImdnvQx7sQ
Source snippet
Gary McKinnon wins extradition battle...
15.
Source: youtube.com
Title: UK hacker’s extradition to US blocked
Link:https://www.youtube.com/watch?v=v4Js8DF80HY
Source snippet
Gary McKinnon will not face prosecution in the UK...
16.
Source: theguardian.com
Title: Hacker ‘left note on US army computer’ | Hacking | The Guardian
Link:https://www.theguardian.com/technology/2005/jul/27/hacking.internetcrime