Page 2 of 191 1.
Since March 2010, the Federal Bureau of Investigation (“FBI”) has been investigating the “Mega Conspiracy,” a worldwide criminal enterprise, which operates and administers several Internet websites that reproduce and distribute infringing copies of copyrighted works, including motion pictures, television programs, musical recordings, electronic books, images, video games, and other computer software. KIM DOTCOM (“DOTCOM”), MATHIAS ORTMANN (“ORTMANN”), BRAM VAN DER KOLK (“VAN DER KOLK”), FINN BATATO (“BATATO”), JULIUS BENCKO (“BENCKO”), SVEN ECHTERNACH (“ECHTERNACH”), ANDRUS NOMM (“NOMM”), and the companies MEGAUPLOAD LIMITED and VESTOR LIMITED (collectively, the “defendants”), as well as other individuals and companies, were members of the “Mega Conspiracy.” 2.
The Internet websites operated by the Mega Conspiracy (collectively, the “Mega Sites”) include but are not limited to at least the following: Megaupload.com; Megavideo.com; and Megaclick.com. 3.
Throughout the investigation, the FBI has obtained millions of pieces of electronic mail (“e-mail”) from accounts associated with the subject matter of this investigation, which span a time period from as early as approximately March 2006 through December 2011. The FBI has searched for and reviewed particular items and themes in these e-mails. 4.
The FBI has conducted online undercover activities involving the Mega Sites. These undercover activities include identifying, viewing, and downloading copyright-infringing materials on these websites; opening “premium” accounts on these websites to analyze how these websites operate from a customer viewpoint; and performing network analysis to further analyze how these websites operate. In addition, the FBI has reviewed financial transactions to, from, and between the defendants and others; has examined computer servers belonging to the Mega Conspiracy; and has confirmed that certain files found on the servers are copyrighted works. 5.
Megaupload.com is a commercial website and service operated by the Mega Conspiracy. As of January 5, 2012, Megaupload.com publicly claimed to have had more than one billion visitors in its history, more than 180 million registered users to date, and an average of 50 million daily visits, and to account for approximately four percent of the total traffic on the Internet. 6.
Megaupload.com often presents itself as a “cyberlocker,” which is a private data storage provider. As described below in the section entitled
Megaupload Is Not Primarily a “Cyberlocker”
, however, as part of the design of the service, the vast majority of Megaupload.com users do not have significant capabilities to store private content long-term. 7.
Any Internet user who goes to the Megaupload.com website can upload a computer file. Once that user has selected a file on their computer and clicks the “upload” button, the Mega Conspiracy’s automated system calculates a 32-digit unique identification number for the file (called an “MD5 hash”) that is generated using a mathematical algorithm. After the MD5 hash calculation, if the system determines that the file does not exist on a server controlled by the Mega Conspiracy, then Megaupload.com reproduces the file on at least one computer server it controls and provides the uploading user with a unique Uniform Resource