▁multiple ▁corpor ations , ▁including ▁Qual comm , ▁Juni per ▁Network s , ▁E - Tra de , ▁e B ay , ▁Ly cos , ▁and ▁others . ▁According ▁to ▁victim ▁testim ony , ▁these ▁attacks ▁caused ▁tens ▁of ▁thousands ▁of ▁dollars ' ▁damage . ▁In ▁December ▁ 1 9 9 9 ▁a ▁UN IX ▁system ▁administrator ▁at ▁Qual comm ▁noticed ▁the ▁attacks ▁to ▁computers ▁in ▁their ▁external ▁DM Z ▁and ▁from ▁their ▁extern ally ▁accessible ▁SSH ▁gateway ▁host , ▁Qual comm ▁not ified ▁the ▁F BI ▁and ▁began ▁to ▁track ▁the ▁attacks ▁through ▁several ▁network ▁h ops , ▁several ▁days ▁later ▁they ▁contact ed ▁the ▁University ▁of ▁Wisconsin , ▁where ▁the ▁origin ating ▁attacks ▁had ▁been ▁launched ▁from . ▁During ▁their ▁own ▁investigation , ▁University ▁of ▁Wisconsin ▁system ▁administr ators ▁then ▁noticed ▁that ▁the ▁connections ▁had ▁come ▁from ▁a ▁University ▁mail ▁server , ▁then ▁using ▁their ▁own ▁Net Flow ▁logs , ▁they ▁track ed ▁the ▁packets ▁to ▁an ▁IP ▁registered ▁to ▁one ▁of ▁the ▁d orm s . ▁Al leg edly , ▁the ▁IP ▁responsible ▁for ▁the ▁attacks ▁was ▁assigned ▁to ▁a ▁second ▁computer ▁in ▁He ck enk amp ' s ▁d orm ▁room . ▁Having ▁previously ▁worked ▁at ▁the ▁university ' s ▁computer ▁help ▁des k , ▁He ck enk amp ▁had ▁significant ▁ ▁knowledge ▁of ▁the ▁university ▁networks . ▁Although ▁law ▁enfor cement ▁had ▁requested ▁that ▁they ▁delay ▁action , ▁system ▁administr ators ▁hack ed ▁into ▁He ck enk amp ' s ▁computer ▁and ▁gathered ▁further ▁evidence ▁against ▁him ,