KAREN NELSON MOORE, Circuit Judge.
Luay Batti was convicted of improperly accessing information from a protected computer, in violation of 18 U.S.C. § 1030(a)(2)(C) and (c)(2)(B)(iii). He appeals the district court's finding that the value of the information that he obtained exceeded $5,000 and the district court's order of $47,565 in restitution. For the following reasons, we hold that the district court's use of the cost of production of the information obtained here was a reasonable, and therefore permissible, method by which to determine the value of the information obtained by Batti, and that the district court did not abuse its discretion in ordering restitution in the amount of $47,565. We therefore
Luay Batti worked in the IT department of Campbell-Ewald, an advertising company in Michigan, for about six years, until he was fired in March 2007. The events leading to his termination began about six months earlier when Batti accessed Campbell-Ewald's computer server and copied confidential computer files belonging to Campbell-Ewald's CEO without authorization. Although these files were normally stored on the CEO's desktop computer, they had been moved by the company to the company's server while the CEO's computer was being replaced. Within these files were "confidential pieces of information. . . including executive compensation, financial statements of the firm, goals and objectives for senior executives of the company reporting to the chairman, and some strategic plans." Dist. Ct. Dkt. ("Doc.") 35 ("Trial Tr.") at 59.
The record does not reveal why Batti retained this information for six months, but, on the evening of February 27, 2007, he went to the office of Campbell-Ewald's
About six weeks later, on April 18, 2007, while the security review was still underway, Naporano learned of two websites that contained confidential information regarding Campbell-Ewald and GM, along with emails sent between officials of these two companies. These websites were open to the public for an unknown—yet likely brief—amount of time, but almost immediately after Campbell-Ewald discovered them they became password-protected. Greatly alarmed by what was clearly a breach of the company's computer-security system, and unaware of exactly how broad the breach was, Naporano contacted the police and an IT security firm, who recommended that Naporano contact the FBI. The FBI determined that Batti had accessed Campbell-Ewald's confidential files no fewer than twenty-one times after his firing, twice through a Campbell-Ewald server and nineteen times through the email account of another Campbell-Ewald employee, Steve Majoros. The FBI conducted a search of Batti's home on April 19, 2007. In an interview with the FBI, Batti admitted that he had accessed Campbell-Ewald's system through its server and Majoros's webmail. On the latter point, Batti admitted that he had learned Majoros's username and password in the course of his employment with Campbell-Ewald; although Majoros had slightly altered his password after Batti was fired, Batti was able to guess the new password through trial and error. Finally, after this interview, Batti sent two emails to the FBI in which he attempted to explain his actions.
In addition to the work done by the FBI, the computer-security firm conducted a substantial investigation, and Naporano obtained legal advice regarding the security breach from Campbell-Ewald's outside counsel. The total cost of the security firm's investigation and the advice from counsel amounted to $47,565. In addition, many of Campbell-Ewald's employees assisted with the investigation. In all, Campbell-Ewald employees spent approximately 747 hours dealing with the security breach.
Batti was charged with one count, a violation of 18 U.S.C. § 1030(a)(2)(C) and (c)(2)(B)(iii). Section 1030(a)(2)(C) sets out the prohibited conduct as follows:
18 U.S.C. § 1030(a)(2)(C). Under subsection (c), a violation of subsection (a)(2)(C) can be either a misdemeanor or a felony:
18 U.S.C. § 1030(c)(2). In the Indictment, the government sought a felony conviction by alleging, pursuant to subsection (B)(iii), that Batti "obtained information valued in excess of $5,000.00." Doc. 13 (Indictment) at 1. The only portion of this charge that Batti challenged in the court below was whether the value of the information that he obtained actually exceeded $5,000.
At a bench trial held on October 28, 2008, the district court heard testimony from FBI Agent Bryan Taube and Naporano regarding Batti's intrusions, the steps taken to investigate and remediate these breaches of security, and the expenditure of $47,565 by Campbell-Ewald for the services of the IT security company and for legal advice. Moreover, the 747 hours spent by Campbell-Ewald employees in response to the intrusion would have cost $163,549 using Campbell-Ewald's standard government-billing rate. Naporano also testified that Campbell-Ewald paid about $305,000 for the television-commercial footage that Batti accessed and put on the disk that he gave Naporano.
The district court found that the $305,000 amount best represented the value of the information that Batti had obtained in his intrusions; it therefore ruled for the government on the issue of whether the value exceeded $5,000. Doc. 26 (Findings of Fact and Conclusions of Law) at 10-13. In coming to this conclusion, the district court noted that there was virtually no case law interpreting how to define or measure the "value of the information obtained," but it found persuasive cases regarding the value of stolen goods under 18 U.S.C. § 2314. Id. at 6-8, 10-11 (citing United States v. Stegora, 849 F.2d 291, 292 (8th Cir.1988); United States v. Cummings, 798 F.2d 413, 416 (10th Cir.1986); United States v. Drebin, 557 F.2d 1316, 1331 (9th Cir.1977); United States v. Kwan, No. 02-241, 2003 WL 22973515, at *8-*9 (S.D.N.Y. Dec.17, 2003) (unpublished opinion)). The courts in these cases held that, where a stolen good does not have any readily ascertainable market value, any reasonable method may be used to calculate its value, including the cost of production, research, or design. See Stegora, 849 F.2d at 292 (holding that, in the absence of a market value, "any reasonable method may be employed" to assign a value to an item, including revenue and the cost of development and production) (citations omitted); Drebin, 557 F.2d at 1331-32 (holding that a jury instruction allowing valuation by "any reasonable method" was
The district court then sentenced Batti to one day in prison, with credit for time served, and thirty-six months of supervised release, the first six months of which the court required Batti to serve in a home-confinement program. Doc. 29 (Judgment) at 2-4. The district court also ordered Batti to pay restitution in the amount of $47,565. Id. at 5. In reaching this determination, the district court rejected the probation officer's recommendation that the guidelines range be based on a loss of approximately $211,000—a number reached by adding the $47,565 cost of the security firm and legal advice to the $163,549 cost of the 747 hours spent on the issue by Campbell-Ewald employees. In the district court's view, Campbell-Ewald "overreacted" in response to Batti's actions and the 747 hours spent by Campbell-Ewald employees was "excessive." Doc. 36 (Sent. Hr'g) at 13-16. As a result, the district court allowed only the $47,565 spent for the security firm and legal advice in calculating Campbell-Ewald's loss for the purposes of sentencing. Id. at 16-17. This resulted in a guidelines range of six to twelve months in prison, from which the court varied downward to impose the one-day custodial sentence, with credit for time Batti had already served. Id. at 19-20.
Batti now appeals two aspects of his conviction and sentence. He challenges the district court's conclusion that the value of the information obtained exceeded $5,000, and he argues that the amount of restitution ordered was excessive and unnecessary. For the following reasons, we reject these arguments.
Batti's challenge to the district court's conclusion that the value of the information obtained exceeded $5,000 requires an interpretation of 18 U.S.C. § 1030(c)(2)(B)(iii). "A matter requiring statutory interpretation is a question of law requiring de novo review, and the starting point for interpretation is the language of the statute itself." United States v. Shafer, 573 F.3d 267, 272 (6th Cir.2009) (quotation marks omitted). Section 1030 of Title 18 contains no definition of the term "value," as used in 18 U.S.C. § 1030(c)(2)(B)(iii), however, and § 1030 does not otherwise indicate how a court should determine whether the "value of the information obtained exceeds $5,000." 18 U.S.C. § 1030(c)(2)(B)(iii).
Batti argues that the district court committed a legal error because he asserts that "there was no evidence [that his] actions had any impact on the company's use of these commercials." Batti Br. at 18 (emphasis in original, alteration added). In other words, Batti contends that, because he did not damage the information in any way, the court could not find that the "value of the information obtained" exceeded $5,000. Id. The district court rejected this argument on the ground that the statute does not require that the information obtained lost value as a result of the defendant's illicit actions. As the district court stated:
Doc. 26 (Findings of Fact and Conclusions of Law) at 12.
We agree with the district court. "When the statutory language is plain, the sole function of the courts—at least where the disposition required by the text is not absurd—is to enforce it according to its terms." Arlington Cent. Sch. Dist. Bd. of Educ. v. Murphy, 548 U.S. 291, 296, 126 S.Ct. 2455, 165 L.Ed.2d 526 (2006) (internal quotation marks omitted); see also Caminetti v. United States, 242 U.S. 470, 485, 490, 37 S.Ct. 192, 61 L.Ed. 442 (1917). The statute here requires only a determination of the "value of the information obtained," not whether that value decreased. Furthermore, the statute contains specific definitions of the terms "loss" and "damage," either of which could be said to include an alleged decrease in the value of the video footage obtained by Batti.
Batti also argues that the district court "should have used . . . the market value of the information," and that "there was no `market' available to set a value on the information." Batti Br. at 14. We believe there is also no merit in this argument, because, as we explain below, although there may be no readily ascertainable market value for the video footage that Batti obtained, the cost of production of that footage was a permissible basis on which the district court could rely in determining whether the value of the information obtained exceeded $5,000.
Subsection (a)(2)(C) was added to 18 U.S.C. § 1030 in 1996 in order to "protect against the interstate or foreign theft of information by computer." Economic Espionage
Regarding the penalties for violations of subsection (a)(2)(C), the Senate Report states that violations involving information of "nominal" or "minimal" value constitute misdemeanors, punishable under § 1030(c)(2)(A). S.REP. No. 104-357 at *8. For violations involving "valuable information" and "misusing information in other more serious ways," however, the felony provision of § 1030(c)(2)(B) applies. Id. Furthermore, Congress identified precisely the types of violations worthy of felony punishment by including within § 1030(c)(2)(B) three preconditions to its application. In order to punish a violation of § 1030(a)(2)(C) as a felony, the government must prove one of the following:
18 U.S.C. § 1030(c)(2)(B)(i)-(iii). The Senate Report notes that the first two of these preconditions derive from the copyright statute, 17 U.S.C. § 506(a), and the wiretap statute, 18 U.S.C. § 2511(1)(d). S.REP. No. 104-357 at *8. Moreover, these two provisions "are intended to have the same meaning as in those statutes." Id.
Subsection (iii) is similar to the transporting-stolen-goods statute mentioned by the Senate Report as the inspiration for the 1996 amendment, 18 U.S.C. § 2314, in that both require the "value" of the object of the violation to exceed $5,000. Section 2314 prohibits "transport[ing], transmit[ting], or transfer[ring] in interstate or foreign commerce any goods, wares, merchandise, securities or money, of the value of $5,000 or more, knowing the same to have been stolen, converted or taken by fraud." 18 U.S.C. § 2314 (emphasis added). Consequently, given the absence of case law interpreting the term "value" in § 1030(c)(2)(B)(iii), we may consider parallel interpretations of § 2314. We also recognize a key difference between the two statutes: although § 1030 prohibits obtaining information, § 2314 prohibits transporting, transmitting, or transferring proscribed items. Thus, as the Senate Report notes, "[t]he crux of the offense under subsection 1030(a)(2)(C) . . . is the abuse of a computer to obtain the information," and "[a]ctual asportation . . . need not be proved." S.REP. No. 104-357 at *7-*8.
Examination of the definition of "value" in 18 U.S.C. § 2311 reveals that the market value of the stolen good constitutes the primary relevant benchmark for the determination of the value of stolen "goods, wares, merchandise, securities or money" in § 2314. According to § 2311, "`Value' means the face, par, or market value, whichever is the greatest, and the aggregate value of all goods, wares, and merchandise, securities, and money referred to in a single indictment shall constitute the value thereof." 18 U.S.C. § 2311. Yet
With this approach in mind, we believe that, where information obtained by a violation of § 1030(c)(2)(B)(iii) does not have a readily ascertainable market value, it is reasonable to use the cost of production as a means to determine the value of the information obtained. The district court here believed that the amount Campbell-Ewald paid for the "spots" or video footage that Batti later obtained could be viewed as the footage's market value, but the district court also recognized that footage of this type is not sold on a typical retail market. Doc. 26 (Findings of Fact and Conclusions of Law) at 11. As a result, the district court believed that the amount that Campbell-Ewald paid for the footage could also be viewed as the cost of production for the development of advertisements or commercials. Id. We see no error in this approach. Section 1030(a)(2)(C) protects, broadly, "information [obtained] from any protected computer," and it is often the case, as it was here, that this information is intangible and lacks any easily ascertainable market value. In such circumstances, we approve of the use of "any reasonable method" to determine the value of information obtained by a breach of § 1030(a)(2)(C), whether this determination is being made by the district court in a bench trial or by a jury. We hold that the district court's use of the cost of production here was a reasonable, and therefore permissible, method by which to determine the value of the information obtained by Batti. We recognize, however, that, given the broad nature of the statute, violations of § 1030(a)(2)(C) may arise in many different contexts. We therefore express no opinion regarding either the propriety of other methods by which to calculate the value of information obtained under 18 U.S.C. § 1030(a)(2)(C) and (c)(2)(B)(iii) or the applicability of the method we approve today to dissimilar factual circumstances.
Batti's second argument on appeal relates to the district court's award of restitution pursuant to 18 U.S.C. § 3663A(a)(1), which requires the district court to award restitution when, according to subsection (c)(1)(B), "an identifiable victim or victims has suffered a physical injury or pecuniary loss." In ordering restitution under § 3663A, the district court must require the defendant to "reimburse the victim for lost income and necessary . . . expenses incurred during participation in the investigation or prosecution of the offense[.]" 18 U.S.C. § 3663A(b)(4); see also 18 U.S.C. 3664(f)(1)(A) ("In each order of restitution, the court shall order restitution to each victim in the full amount of each victim's losses as determined by the court and without consideration of the economic circumstances of the defendant."). The statute further provides that "[a]ny dispute as to the proper amount or type of restitution shall be resolved by the court by the preponderance of the evidence." 18 U.S.C. § 3664(e).
Batti claims that the district court's order of restitution was based in part on
"We review de novo `[w]hether a restitution order is permitted under the law.' If we determine that restitution is permissible, then the amount of restitution ordered by the district court is reviewed under the abuse-of-discretion standard." United States v. Williams, 612 F.3d 500, 509 (6th Cir.2010) (internal citation omitted).
We see no abuse of discretion in the district court's restitution order of $47,565. Batti has not developed his assertion that the surveillance by the computer-security firm was unnecessary and excessive, beyond what he claims are "unanswered questions," namely: "Why the need for so much surveillance, particularly given that state police authorities were immediately alerted, was never addressed on the record. In addition, how this surveillance related to the investigation conducted by the law firm was also never addressed." Batti Br. at 21 (citing Trial Tr. at 77-79). The district court, however, gave close consideration to each of the government's requested bases for an order of restitution. The district court first rejected the notion that restitution was warranted for the 747 hours of employee time spent in reaction to Batti's actions; it believed that this reaction by Campbell-Ewald was "excessive." Sent. Hr'g Tr. at 15-16. The hiring of the computer-security firm and legal counsel, on the other hand, was acceptable to the court. It believed that these actions were "perhaps a little bit of an overreaction, [but] not outside the pa[le]." Id. at 16. More specifically, the district court noted that the "charges of the computer security consultant seemed in line with the scope of the work that it was given to investigate." Id. at 17. On this point, Taube testified at the bench trial that "Campbell-Ewald had set up surveillance on Mr. Batti because they were worried about some physical security problems. And the surveillance observed Mr. Batti at Bloomfield Township Library on [April] 23rd," the date on which Batti again tried to access Campbell-Ewald's computer server. Trial Tr. at 27. The "physical security problems" to which Taube referred were mentioned by Naporano, as well, who testified that "[a]t that time, there were several employees or former employees or disgruntled employees that had returned to their place of employment and caused
For these reasons, we hold that the district court's use of the cost of production here was a reasonable, and therefore permissible, method by which to determine the value of the information obtained by Batti, and that the district court did not abuse its discretion in ordering restitution in the amount of $47,565. We therefore