United States v. John Gammell
Opinion
After conducting a series of malicious computer attacks, John Gammell pled guilty to one count of conspiracy to cause intentional damage to a protected computer, in violation of
I.
Between 2015 and 2017, Gammell engaged in a campaign of malicious computer attacks against various entities with whom he had personal grievances. The attacks, known as distributed denial of service attacks, or DDoS attacks, use repeated attempts to deny service to a computer or website, thereby making it inaccessible to users or customers. In essence, DDoS attacks flood a computer or website with massive amounts of internet traffic to the point that the computer or website becomes disabled and inaccessible to users or customers.
Gammell victimized approximately 40 different entities, comprised of companies he used to work for, companies that did not hire him, companies that he perceived as competitors to his business, law enforcement agencies, and court systems. His attacks lasted anywhere from weeks to two years and resulted in the disruption or complete disabling of the victims' websites, applications, or computer systems. Each of his victims experienced difficulty in restoring the reliability, functionality, and accessability of the affected websites, and expended significant efforts and resources in identifying the source of the attacks and in taking suitable mitigation and infrastructure improvement measures.
Throughout the course of his attacks, Gammell made considerable efforts to conceal his identity as the perpetrator. When using his own computer to launch DDoS attacks, Gammell used a service to mask his IP address, used encrypted and drive cleaning tools to conceal any evidence of the attacks on his computer, spoofed email addresses, and used names of victims' former employees to create suspicion against other individuals. Gammell also utilized third-party companies to launch attacks, which significantly multiplied the number of attacks and further concealed Gammell as the perpetrator. Gammell also used cryptocurrency to pay the third-party companies in a continued effort to conceal his identity. On at least two occasions, Gammell also sent emails to affected entities, bragging about the attacks and mocking the entities for the disruptions.
Gammell was subsequently charged with conspiracy to cause intentional damage to a protected computer, along with two counts of being a felon in possession of a firearm. The two felon-in-possession counts arose out of conduct that occurred outside of Minnesota. In May 2017 in Colorado, Gammell possessed the parts necessary to build an AR-15 assault rifle and he possessed 420 rounds of ammunition. Also in May 2017, in New Mexico, Gammell possessed two handguns and hundreds of rounds of ammunition. Gammell pled guilty to all three counts pursuant to a plea agreement, which included a waiver of venue with respect to the felon-in-possession counts.
At sentencing, the district court determined that Gammell had at least three prior convictions for violent felonies that qualified as predicate offenses under the Armed Career Criminal Act (ACCA). The district court identified the three predicate offenses as two convictions in Minnesota state court in 1981 for aggravated robbery, in violation of
II.
Gammell first asserts that the district court erroneously sentenced him as an armed career criminal, arguing that the district court incorrectly concluded that he had the requisite predicate offenses. "We review de novo whether a prior conviction is a predicate offense under the ACCA."
United States v. Eason
,
The district court sentenced Gammell to the statutory minimum of 180 months as an armed career criminal based upon three previous convictions for violent felonies under Minnesota law.
See
First, as Gammell concedes, prior panels of this Court have already determined that aggravated robbery under Minnesota law is a violent felony.
See
United States v. Libby
,
Second, Gammell's argument regarding his conviction for aiding and abetting second-degree burglary is premised upon his assertion that a distinction exists between accomplice liability and primary liability for the purposes of ACCA applicability. He does not dispute that second-degree burglary is a violent felony; rather, he asserts that aiding and abetting accomplice liability is distinct from the substantive offense and requires evaluation of the Minnesota aiding and abetting statute. But as our Court has previously explained "[a]iding and abetting, not itself an offense, [is] simply one way to prove [the defendant] guilty of [the substantive offense]."
United States v. Zackery
,
For purposes of § 924(e)(2)(B)(i), it is irrelevant that Salean's 1995 conviction was for aiding and abetting fourth degree assault. See United States v. Groce ,999 F.2d 1189 , 1191-92 (7th Cir. 1993) ; accord United States v. Brown ,550 F.3d 724 , 728 (8th Cir. 2008) (aiding the commission of aggravated robbery is a crime of violence under U.S.S.G. § 4B1.2 ). Because modern criminal statutes abrogate the common law distinction between principals and aiders and abettors, the "generic sense" of statutes prohibiting crimes such as assault "covers ... 'aiders and abettors' as well as principals." Gonzales v. Duenas-Alvarez ,549 U.S. 183 , 190,127 S. Ct. 815 ,166 L.Ed.2d 683 (2007).
United States v. Salean
,
III.
Gammell next challenges the district court's restitution order, asserting that the district court impermissibly awarded compensation for costs of investigations that the victims voluntarily undertook, erroneously awarded Gammell's victims a windfall, and based the award on insufficient and unreliable evidence. Each of Gammell's arguments is unavailing. "We review the district court's decision to award restitution for an abuse of discretion and the district court's finding as to the amount of loss for clear error. The government bears the burden of proving the amount of restitution based on a preponderance of the evidence."
United States v. Frazier
,
Under the MVRA, the district court " 'shall order' a defendant convicted of 'an offense against property under this title, .. including any offense committed by fraud or deceit[,]' to pay restitution to a 'victim of the offense.' "
[i]nstead of prescribing a single method to be applied in all circumstances, the law contemplates discretion by the sentencing court in determining how to value a victim's losses. Consequently, the 'value' of lost property under the MVRA must be determined in the district court's discretion depending on the circumstances of each case.
Id. at 904 (citation omitted). Utilizing this framework, the district court determined that Gammell's 14 victims suffered losses in the amount of $955,656.77 and ordered restitution in this amount.
Gammell first asserts the district court's restitution order must be reversed because it includes costs associated with investigations that victims independently undertook apart from the government's investigation into Gammell's attacks.
See
Lagos v. United States
, --- U.S. ----,
Second, Gammell asserts that the district court erred in ordering $955,656.77 in restitution because it improperly included expenses that victims incurred for mitigation services and infrastructure modifications, which effectively provided victims with a windfall because it allowed the victims to recover costs against future and speculative property loss due to already-existing security vulnerabilities. But as the district court noted, the unique and pervasive nature of Gammell's attacks required specific and extensive efforts to restore the affected website and applications to proper functionality. The district court discussed in detail the nature and substance of these efforts, including that "Gammell's victims were deprived of their property-namely, reliable access to and use of their websites and web applications-absent the mitigation efforts they used," before concluding that "[t]hese costs effectively equate to repair or cleanup costs because they involve mitigating the damage caused by Gammell's DDoS attacks and restoring a website or web application to its normal functionality, without necessarily replacing the website or web application." Restitution Order 8, 10. We find no error in the district court's determination that these expenses were compensable as repair or cleanup costs under the MVRA.
Finally, Gammell challenges the sufficiency and reliability of the evidence supporting the restitution award, asserting that requests for restitution were based on vague claims, that the victims failed to document their losses, and that the government failed to verify the amount requested by each victim. But Gammell's argument ignores the realities of the district court's thoughtful and thorough restitution order, entered following a two-day evidentiary hearing. The district court summarized the evidence upon which it based its order as follows:
Here, the United States introduced in evidence signed declarations or affidavits from each of the 14 victims that seeks restitution. These declarations and affidavits describe, in varying degrees of detail, the actions each victim took to mitigate or remediate the damage caused by Gammell's DDoS attacks and the costs associated with those actions. In addition to the fees and labor costs involved in obtaining DDoS mitigation services and moving websites to new web hosts, Gammell's victims paid employees and third-party vendors to take other responsive actions, including investigating and diagnosing the disruptions and mitigating and remediating the effects of the DDoS attacks. Accompanying these declarations and affidavits are hundreds of pages of underlying documentation that the United States obtained from the victims, including emails, invoices and letters from third-party vendors, timesheets, and other summaries and spreadsheets. Moreover [FBI] Agent Behm testified about the contents of these documents as well as details he learned from his personal conversations with the victims.
Restitution Order 12. The district court also noted that because Gammell's "attacks created crisis situations for his victims that required immediate action," victims did not track all responsive actions "with the level of precision that Gammell now demands" and stated that "[t]hat each victim did not respond in an identical manner to Gammell's attacks is not surprising and does not render the evidence unreliable." Restitution Order 13. These factors did not render the evidence so insufficient and unreliable as to undercut the validity of the district court's "reasonable estimate of the loss[.]"
United States v. Carpenter
,
The voluminous and detailed evidence provided a legally sufficient basis for the district court to determine the appropriate amount of restitution, and we give the district court's determination of this amount considerable deference.
See
IV.
For the foregoing reasons, we affirm.
KOBES, Circuit Judge, concurring in part and concurring in the judgment.
I join the court's opinion except the portion of Section II that holds that aiding and abetting second-degree burglary in Minnesota is an ACCA predicate. I agree with the result, but I do not agree it is compelled by
United States v. Salean
,
In
Salean
we held that it was irrelevant, under the ACCA, that the defendant was convicted in Minnesota for aiding and abetting fourth-degree assault rather than for fourth-degree assault as a principal because modern criminal law has abrogated the distinction between principal and accomplice liability.
Both Supreme Court and Eighth Circuit precedent require us to evaluate Gammell's claim about the scope of Minnesota aiding and abetting. In
Gonzales v. Duenas-Alvarez
,
Gammell claims that two features of Minnesota's aiding and abetting doctrine criminalize conduct that other jurisdictions do not. First, he argues that Minnesota ascribes accomplice liability to those who are merely present at the scene of a crime. He points us chiefly to
State v. Ostrem
,
Although federal aiding and abetting requires "some conduct of an affirmative nature and mere negative acquiescence is not sufficient,"
Johnson v. United States
,
Second, Gammell argues that Minnesota conflates conspiracy liability and aiding and abetting liability because the Minnesota aiding and abetting statute extends liability to one who "conspires with" another to commit a crime.
See
Because I do not find anything "special" about Minnesota's aiding and abetting doctrine, I concur in the court's judgment that Gammell's conviction for aiding and abetting second-degree burglary qualifies as an ACCA predicate.
The Honorable Wilhelmina M. Wright, United States District Judge for the District of Minnesota.
The argument was presented in Douglas v. United States , 759 Fed. App'x 554 (8th Cir. 2019) (per curiam), but that opinion is unpublished and has no precedential value. See Eighth Circuit Rule 32.1A. Douglas is also not persuasive because it did not address the issue Gammell raises except to cite Salean for the same proposition as the majority in this case.
To the extent that
Ostrem
or
Parker
might suggest that the intent to aid could be inferred from presence, I take the Minnesota Supreme Court at its word that more is required to sustain a conviction.
See
State v. Mahkuk
,
Reference
- Full Case Name
- UNITED STATES of America, Plaintiff - Appellee v. John Kelsey GAMMELL, Defendant - Appellant United States of America, Plaintiff - Appellee v. John Kelsey Gammell, Defendant - Appellant
- Cited By
- 13 cases
- Status
- Published