显示标签为“enemy”的博文。显示所有博文
显示标签为“enemy”的博文。显示所有博文

2011年6月6日星期一

Drug Makers’ Feared Enemy Switches Sides, as Their Lawyer

He racked up numerous convictions and mega-settlements in nearly a quarter-century, using whistle-blowers and secret grand juries to pressure major pharmaceutical and health companies into ending illegal practices like kickbacks to doctors and misuse of blockbuster drugs.


Once described as a cross between a firebrand preacher and a charismatic litigator, Mr. Loucks burnished a reputation aptly captured in a Fortune magazine headline: “Why Do Drug Companies Fear This Man? Maybe because he’s declared all-out war on cheats in the drug industry.”


But a year and a half ago, Mr. Loucks, a Republican, left the United States attorney’s office in Boston after he was passed over for the top post and President Obama appointed a Democrat. Instead, Mr. Loucks joined Skadden, Arps last July, and has startled former allies by emerging in recent months as zealous a corporate defender as he was a prosecutor, complete with proposals seeking more lenient treatment for the medical companies he once vilified.


In a six-page memo last month to clients in his portfolio, which may include some of the very same corporations he prosecuted repeatedly, Mr. Loucks bemoaned strategies he had embraced.


“The government and the whistle-blower have an advantage,” he wrote, complaining that federal investigators were now using the law unfairly. “While prosecutors often assert the company has engaged in ‘serious’ misconduct, they keep the company in the dark, often for years, as to the specific allegations.”


Those who have known him are quick to recall that his crowning achievement was a $2.3 billion settlement against Pfizer that capped a four-year secret investigation.


“We’re all disappointed that he’s gone over to the dark side because it seemed that he was a good prosecutor,” said Shelley R. Slade, a whistle-blowers’ lawyer in Washington and a former senior counsel for health care fraud at the Justice Department.


“I looked upon it with sadness,” Patrick Burns, spokesman for the whistle-blower advocacy group Taxpayers Against Fraud, said of Mr. Loucks’ change. “He’s a good and honorable person. He did great work in the Boston office. He’s a good lawyer. It’s just too bad.”


Federal ethics rules prohibited Mr. Loucks from any dealings with the United States attorney’s office in Boston for a year after his resignation, and he can never be involved in cases he investigated directly. But he is not barred from representing clients he once prosecuted on other matters, and his law firm’s roster includes some of the biggest companies he once investigated, including Pfizer, Merck, Schering-Plough, Bristol-Myers Squibb and Medtronic.


He defends his newfound friendship with former foes, and notes that he’s still wearing cowboy boots native to his Oklahoma childhood even though he’s now working in the white-collar division of a prestigious law firm.


“While everyone calls it ‘the other side,’ I’m doing the same thing I’ve always done, which is zealously representing my clients,” he said.


And while he used to call some of those people’s actions “evil,” today he argues that drug and medical device companies are making strides in complying with federal billing, fraud and kickback laws. “They make products that have huge benefits to a number of people,” he said. Skadden, a 2,000-lawyer firm, has made several hires in recent years to amplify its health care practice.


In interviews and a lengthy e-mail exchange, Mr. Loucks said his views on the whistle-blower law had evolved.


The False Claims Act, with its triple damages, has been the government’s most powerful weapon against health care fraud since Congress in 1986 increased the rewards for whistle-blowers. Since then, taxpayers have recovered an estimated $28 billion from medical companies.


As a federal prosecutor in Boston, Mr. Loucks created a health care fraud unit and used the law, as well as the tools of secrecy and surprise, to reap major awards. The unit’s victories are renowned, starting with an $875 million payment in 2001 by TAP Pharmaceuticals. Whistle-blowers shared $95 million in that case, alerting companies and informants to the stakes involved.


For years, Mr. Loucks has argued that whistle-blowers are paid far much in health care fraud cases — bounties up to 30 percent, totaling $650 million in just the last two years, he said. These people would blow the whistle for less, he argued both inside the prosecutor’s office and more recently in a paper titled “the Great American Giveaway.” While that hostility toward what he considers the greed of some whistle-blowers is old news, Mr. Loucks’ views on unsealing their complaints are new.


In his May 12 memo to clients, Mr. Loucks urged some companies to press judges to unseal complaints more quickly. That way, he says, they can learn the scope of complaints sooner, identify witnesses and fight back harder.


“If Mike was still with the Justice Department, he could give you 10 reasons why this is a bad idea,” said Suzanne E. Durrell, a whistle-blowers’ lawyer in Boston who worked with Mr. Loucks when she was chief of the civil division for the United States attorney in Massachusetts.


Mr. Loucks says more openness would let companies clean up their own acts, even if it meant adverse publicity.


He points to new statistics that he says support his argument. The Justice Department reported to Congress that 885 False Claims Act cases involving health care fraud were pending under seal at the beginning of this year, with only about 200 prosecutors to juggle them. On average, a case was sealed for more than a year, and some much longer.


“That the government doesn’t have adequate resources to handle the cases is not a good cause to keep them under seal,” Mr. Loucks said in an interview, comparing it to a sports game where only one team is allowed to try to score. In these cases, that would now be his former team.


“I knew what I was doing on behalf of the government,” he said. “I don’t know if lawyers on the other side felt they were not able to adequately represent their clients while the case was under seal.”


Nicholas C. Theodorou, chairman of Foley Hoag’s business crimes defense group in Boston, said Mr. Loucks’ argument made sense from a corporate defense standpoint, and possibly would sit well with some federal judges who have questioned why cases remain under seal so long.


For his part, Mr. Loucks uses a baseball reference. Johnny Damon left his beloved Boston Red Sox in late 2005 to sign with “the evil empire, the New York Yankees,” Mr. Loucks said. Both teams won World Series with help from Mr. Damon.


Asked whether the “evil empire” analogy fit the Justice Department or Skadden, Mr. Loucks said, “One man’s evil empire is another’s home team.”


View the original article here

2011年4月9日星期六

The enemy within

5 April 2011 Last updated at 21:24 ET By Mark Ward Technology correspondent, BBC News Julian Assange with leaked data, Reuters Wikileaks has got many companies thinking about how to monitor data movements Whistle-blowing website Wikileaks does not just spell trouble for the US government, Bank Julius Baer and the other companies, organisations and individuals that feature on the site.
Its mere existence and the appearance of many copycat sites is starting to occupy the minds of those who oversee security in every large company.
Why?
"Simple," said Philippe Courtot, founder and chief executive of security firm Qualys, "because every company has something to hide."
In most cases, he said, those secrets are just details of deals that are about to be signed, products under development or strategy changes. But also, he said, many firms have "dirty laundry" that would damage their reputation if it became public.
Wikileaks is tricky to defend against, said Mr Courtot, because the threat it poses is very diffuse and it comes from the inside. Before now, he said, corporates have put most of their time and money into defending themselves against external attack.
Spam filters, firewalls, anti-virus programs and intrusion detection systems are all about stopping the bad guys getting in. This makes sense because there are many millions of malicious programs and legions of cyber thieves endlessly trying to subvert employees and networks for profit.
Attack profile
Those defences are not entirely useless against the threats that Wikileaks pose, said Alex De Joode, security officer at hosting firm LeaseWeb.
They can come into play if supporters of Wikileaks take action in its name.
"What Wikileaks does is not really cyber crime," said Mr De Joode, "The acts of the individuals who tried to make companies accountable for their actions against Wikileaks using denial of service attacks, that's cyber crime."
In Operation Payback, many Wikileaks supporters joined forces to bombard well-known web firms such as Paypal, Amazon and Visa with data in an attempt to knock them offline. The targets were chosen because the firms, in the eyes of those supporters, had not done enough to support Wikileaks.
At such times, said Mr De Joode, established defences work because they are designed to defend against precisely those types of attack.
Not all defences point outwards. Inside corporate networks there are also tools available to watch what employees are doing.
Mohan Koo, managing director of security firm Dtex, said it was possible to monitor every mouse click and key press employees make, no matter the size of the company.
Wikileaks supporters, PA Security systems can defend against attacks carried out by Wikileaks supporters
"But," he said, "no-one is going to do that because there's just too much data."
Equally wrong-headed, he said, was for a company worried by Wikileaks to clamp down on what their employees do online.
"A company might think they have locked it down and there's nothing going on," he said. "but all they have done is make people look for ways around the blocks."
The statistics gathered by strict intranet monitoring tools might suggest that nothing nefarious was going on, he said.
In reality, security was likely to be compromised more because employees are using subterfuge to do the things they are used to doing, such as updating Facebook, while at work.
Having an unmonitored channel over which company information is flowing is a real problem, he said, given the increasing need to gather data to satisfy industry regulations; the scrutiny of bodies such as the Information Commissioner and the potential damage a brand would suffer in the wake of a leak.
Even worse, he said, a crackdown on web use during work hours might dissolve the bond of trust that should exist between a worker and their employer.
That relationship would suffer, said Mr Koo, if firms use technology in an adversarial manner.
Trusting times
Far better, he said, was to show employees why security matters to their personal lives as well as in the workplace.
"Remind them that security is about looking after their interests as well as those of the company," he said.
"A lot of users and employees are not aware of the implications of their day-to-day actions," he said.
Showing how unprotected phones, laptops or desktops could lead to lost data would help them at home and at work, he said.
"The whole objective here is to build trust," he said. "You need to get those employees to buy into the reasons you are doing this."
More trust, he said, meant a workforce that was less likely to leak or feel motivated to expose internal secrets.
USB stick and CD, BBC Good habits can help keep data safe at home and at work
One radical way to avoid the risk of having secrets exposed is to have no internal secrets.
Indian technology firm HCL took this approach as part of a re-working of the company that began in 2005.
The need for change was driven by the realisation that although the company was still growing, the market for outsourcing was growing faster and it was getting left behind.
At the heart of the change, said HCL director Bindi Bhullar, was the decision to put employees, rather than their managers, in charge of the business.
"Those that understand the business the best are the employees," he said. "The value for the company is created between employees and customers."
Managers at HCL now work to ensure that employees get the support they need to do their job better. Part of that, said Mr Bhullar, involved sharing information about how the company is organised, details of employee reviews, who gets paid what and details of contracts and customer contacts.
"Internally we share a lot of sensitive data," he said, adding that the approach has not been without its problems.
But, he added, sharing that information, sent a strong signal about how much the company trusted its employees and helps to get them more engaged.
"If someone is engaged then you are going to lower the risk of someone blowing the whistle," he said. "Trust and transparency insulate you from issues like leaks."
View the original article here

The enemy within

在 ServiceModel 客户端配置部分中,找不到引用协定“TranslatorService.LanguageService”的默认终结点元素。这可能是因为未找到应用程序的配置文件,或者是因为客户端元素中找不到与此协定匹配的终结点元素。
在 ServiceModel 客户端配置部分中,找不到引用协定“TranslatorService.LanguageService”的默认终结点元素。这可能是因为未找到应用程序的配置文件,或者是因为客户端元素中找不到与此协定匹配的终结点元素。
5 April 2011 Last updated at 21:24 ET By Mark Ward Technology correspondent, BBC News Julian Assange with leaked data, Reuters Wikileaks has got many companies thinking about how to monitor data movements Whistle-blowing website Wikileaks does not just spell trouble for the US government, Bank Julius Baer and the other companies, organisations and individuals that feature on the site.

Its mere existence and the appearance of many copycat sites is starting to occupy the minds of those who oversee security in every large company.

Why?

"Simple," said Philippe Courtot, founder and chief executive of security firm Qualys, "because every company has something to hide."

In most cases, he said, those secrets are just details of deals that are about to be signed, products under development or strategy changes. But also, he said, many firms have "dirty laundry" that would damage their reputation if it became public.

Wikileaks is tricky to defend against, said Mr Courtot, because the threat it poses is very diffuse and it comes from the inside. Before now, he said, corporates have put most of their time and money into defending themselves against external attack.

Spam filters, firewalls, anti-virus programs and intrusion detection systems are all about stopping the bad guys getting in. This makes sense because there are many millions of malicious programs and legions of cyber thieves endlessly trying to subvert employees and networks for profit.

Attack profile

Those defences are not entirely useless against the threats that Wikileaks pose, said Alex De Joode, security officer at hosting firm LeaseWeb.

They can come into play if supporters of Wikileaks take action in its name.

"What Wikileaks does is not really cyber crime," said Mr De Joode, "The acts of the individuals who tried to make companies accountable for their actions against Wikileaks using denial of service attacks, that's cyber crime."

In Operation Payback, many Wikileaks supporters joined forces to bombard well-known web firms such as Paypal, Amazon and Visa with data in an attempt to knock them offline. The targets were chosen because the firms, in the eyes of those supporters, had not done enough to support Wikileaks.

At such times, said Mr De Joode, established defences work because they are designed to defend against precisely those types of attack.

Not all defences point outwards. Inside corporate networks there are also tools available to watch what employees are doing.

Mohan Koo, managing director of security firm Dtex, said it was possible to monitor every mouse click and key press employees make, no matter the size of the company.

Wikileaks supporters, PA Security systems can defend against attacks carried out by Wikileaks supporters

"But," he said, "no-one is going to do that because there's just too much data."

Equally wrong-headed, he said, was for a company worried by Wikileaks to clamp down on what their employees do online.

"A company might think they have locked it down and there's nothing going on," he said. "but all they have done is make people look for ways around the blocks."

The statistics gathered by strict intranet monitoring tools might suggest that nothing nefarious was going on, he said.

In reality, security was likely to be compromised more because employees are using subterfuge to do the things they are used to doing, such as updating Facebook, while at work.

Having an unmonitored channel over which company information is flowing is a real problem, he said, given the increasing need to gather data to satisfy industry regulations; the scrutiny of bodies such as the Information Commissioner and the potential damage a brand would suffer in the wake of a leak.

Even worse, he said, a crackdown on web use during work hours might dissolve the bond of trust that should exist between a worker and their employer.

That relationship would suffer, said Mr Koo, if firms use technology in an adversarial manner.

Trusting times

Far better, he said, was to show employees why security matters to their personal lives as well as in the workplace.

"Remind them that security is about looking after their interests as well as those of the company," he said.

"A lot of users and employees are not aware of the implications of their day-to-day actions," he said.

Showing how unprotected phones, laptops or desktops could lead to lost data would help them at home and at work, he said.

"The whole objective here is to build trust," he said. "You need to get those employees to buy into the reasons you are doing this."

More trust, he said, meant a workforce that was less likely to leak or feel motivated to expose internal secrets.

USB stick and CD, BBC Good habits can help keep data safe at home and at work

One radical way to avoid the risk of having secrets exposed is to have no internal secrets.

Indian technology firm HCL took this approach as part of a re-working of the company that began in 2005.

The need for change was driven by the realisation that although the company was still growing, the market for outsourcing was growing faster and it was getting left behind.

At the heart of the change, said HCL director Bindi Bhullar, was the decision to put employees, rather than their managers, in charge of the business.

"Those that understand the business the best are the employees," he said. "The value for the company is created between employees and customers."

Managers at HCL now work to ensure that employees get the support they need to do their job better. Part of that, said Mr Bhullar, involved sharing information about how the company is organised, details of employee reviews, who gets paid what and details of contracts and customer contacts.

"Internally we share a lot of sensitive data," he said, adding that the approach has not been without its problems.

But, he added, sharing that information, sent a strong signal about how much the company trusted its employees and helps to get them more engaged.

"If someone is engaged then you are going to lower the risk of someone blowing the whistle," he said. "Trust and transparency insulate you from issues like leaks."


View the original article here