Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Tracking & Law Enforcement

CloudFlare Releases Transparency Report for First Half of 2015

Web performance and security company CloudFlare has released a report detailing the number of requests it received from government agencies in the first half of 2015.

Web performance and security company CloudFlare has released a report detailing the number of requests it received from government agencies in the first half of 2015.

CloudFlare said it received 12 subpoenas between January 1, 2015 and June 30, 2015, the same number as in the second half of 2014. These subpoenas, ten of which have been answered, affect a total of 12 accounts and 139 domains.

While the number of subpoenas has remained the same, the number of court orders increased considerably. In the first half of 2015, the company was hit with 50 court orders, more than it received in the entire last year. The content delivery network responded to 49 of the court orders, which affect a total of 2,120 domains and 96 accounts.

The transparency report, which is published on a semiannual basis, shows that CloudFlare received three search warrants and one pen register/trap and trace order, and answered all of them. Records show that the company has not received any wiretap orders.

As for National Security Letters (NSLs) and Foreign Intelligence Surveillance Act (FISA) orders, companies are not allowed to disclose the exact number. CloudFlare says it has received between 0 and 249 such national security orders. The firm has pointed out that even if the actual number is 249, only less than 0.005 percent of customer accounts would be impacted.

The CDN has pointed out that one of the requests received in the first half of 2015 came from a foreign law enforcement agency. The request was issued via a United States court through a mutual legal assistance treaty (MLAT). CloudFlare has noted that it is not subject to foreign jurisdictions and it only accepts requests that come through the U.S. court system.

It’s worth noting that the requests detailed in the transparency report are for both CloudFlare and StopTheHacker, the anti-malware firm acquired in February 2014.

The company says it has never handed over SSL keys to anyone, it has never installed law enforcement software or hardware on its network, it has never bowed to political pressure, and it has never provided law enforcement agencies a feed of customer content.

Advertisement. Scroll to continue reading.

“If CloudFlare were asked to do any of the above, we would exhaust all legal remedies, in order to protect its customers from what we believe are illegal or unconstitutional requests,” the company said.

Related: Amazon Details Government Data Requests in First Transparency Report

Written By

Eduard Kovacs (@EduardKovacs) is a managing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Shay Mowlem has been named CMO of runtime and application security company Contrast Security.

Attack detection firm Vectra AI has appointed Jeff Reed to the newly created role of Chief Product Officer.

Shaun Khalfan has joined payments giant PayPal as SVP, CISO.

More People On The Move

Expert Insights

Related Content

Cybercrime

Daniel Kelley was just 18 years old when he was arrested and charged on thirty counts – most infamously for the 2015 hack of...

Cybercrime

No one combatting cybercrime knows everything, but everyone in the battle has some intelligence to contribute to the larger knowledge base.

Cybercrime

The FBI dismantled the network of the prolific Hive ransomware gang and seized infrastructure in Los Angeles that was used for the operation.

Ransomware

The Hive ransomware website has been seized as part of an operation that involved law enforcement in 10 countries.

Privacy

Employees of Chinese tech giant ByteDance improperly accessed data from social media platform TikTok to track journalists in a bid to identify the source...

CISO Strategy

The SEC filed charges against SolarWinds and its CISO over misleading investors about its cybersecurity practices and known risks.

Cybercrime

A global cyber espionage campaign has resulted in the networks of many organizations around the world becoming compromised after the attackers managed to breach...

Cybercrime

A look into recent cryptocurrency tracing and recovery operations by the FBI and UK’s Metropolitan Police