[ Home]
TAPA In The News

Thwarting the Perfect Crime
By Jonathan Littman, illustration by Mark Oldroyd -- 4/1/2003
Electronic Business

Sections:
Painful losses
Holistic approach
Securing the supply chain
E-tracking shipments
Evaluating antitheft technologies

When it comes to crime, silicon is nearly good as gold. Last Christmas, a gang sliced open the padlock on a parked big rig north of the 101 freeway in Santa Clara, CA, quickly loaded the booty onto a nearby truck and drove off into the night. The holiday payoff: a cool $3 million in Cisco boards. Three weeks later, just before midnight on Sunday, January 12, a driver left an American Airlines van unattended near London's Heathrow Airport. Two men stole the van and its princely cargo, more than $10 million worth of Pentium 4 chips.

Truck hijackings and cargo thefts of chips and components are rife at airports, freeways and ports around the world. The cases cited above are just a glimpse of a worldwide epidemic that shows no sign of abating. Just days before the stunning Heathrow heist, a gang of thieves and fences was sentenced for a series of U.K. technology thefts that totaled more than $15 million. The perpetrators of the Cisco and Pentium thefts are still at large, and both cases are being actively investigated by the authorities.

Swooning semiconductor prices haven't diminished the risk of logistics theft for major manufacturers. A van or small truck can easily carry $10 million or more of chips—and provide criminals with millions in profit. Increasingly adept thieves can disarm sophisticated alarms and GPS tracking devices and empty a silicon-laden truck in minutes.

Cargo crime threatens efficient logistics, strains critical business relationships and costs individual companies a few million to tens of millions of dollars in annual losses. When manufacturers were first blitzed by widespread component theft in the early 1990s, many responded by "hardening" their facilities, emphasizing the basics of old-line security, the three Gs: guns, guards and gates. Today, some companies confronted with high-tech hijackings and cargo thefts are finding success through the smart use of guards. But they're also investigating the fourth G: gizmos, an intriguing array of electronic tracking and alarm and access control systems soon to hit the market.

Painful losses

It's the perfect crime. Unlike with cocaine or other illicit drugs, possession of stolen chips isn't illegal on its face. Small, light and often lacking serial numbers, chips pose an ideal target, the modern equivalent of uncut diamonds. Indeed, the FBI says many high-tech firms lack the records necessary to prove that a particular batch of components was stolen. Meanwhile, Internet auctioneers and gray and black marketers provide a ready global market for stolen goods.

The industry downturn makes losses even more painful. "With eroding margins, cargo crime is more visible than it has been in previous decades," says Dan Purtell, Americas investigations manager for Intel, Santa Clara, CA. "It comes right off the bottom line." Companies often find themselves competing against their own merchandise on the black market, further driving down prices.

Marquee firms have been hit especially hard. Joe Chiaramonte, director of security for Sun Microsystems, Palo Alto, CA, says that for a time, his company was the vendor of choice for thieves. "Not only did we have cargo theft but our customers were getting burglarized too."

No one knows exactly how many billions of dollars' worth of chips and computers are stolen each year. The National Cargo Security Council estimates that $15 billion worth of cargo of all kinds is stolen annually—and more than $50 billion worldwide. "Part of the problem is that companies don't fully report their losses," says Bonni Tischler, vice president for global transportation and supply chain security of Pinkerton Consulting & Investigations, New York, NY. "The cargo theft figures you hear about are only the tip of the iceberg." The FBI, which compiles detailed statistics on car thefts and home burglaries, keeps no data on the theft of high-tech products—even though manufacturers fear that some of the stolen booty is finding its way to countries on the do-not-export list such as Pakistan, Iraq and Iran.

In the long run, the Bush administration's war on terrorism may aid in the fight against cargo crime. Government-sponsored efforts, such as the Customs Trade Partnership Against Terrorism (C-TPAT), an initiative to improve supply chain security and certify approved "known" shippers, should eventually tighten security at airports and ports. But today the reality is that many FBI agents who formerly fought cargo crime have been reassigned to antiterrorism duty. Strapped state and local law enforcement agencies, saddled with Homeland Security duties, are finding it tough to fund cargo crime investigators. "It's the grand finale to the budget crunch," says Louis Tyska, former chairman of the National Cargo Security Council in Annapolis, MD. "U.S. attorneys have been told that fighting cargo crime is no longer a priority."

Last summer, one of the nation's premier cargo crime-fighting squads, the Los Angeles County Sheriff's Cargo Criminal Apprehension Team (nicknamed Cargo Cats), was disbanded, because of a budget crunch, leaving the nation's largest port, the one encompassing Los Angeles and Long Beach, vulnerable. A vigorous campaign by the transportation and insurance industries raised enough funding to bring back the Cargo Cats for a year—albeit with a team of seven instead of 11 or more. "During the three- or four-month hiatus, the crooks knew we were gone," says Detective Duane Decker, currently investigating a mid-February theft of $1.5 million worth of laptop computers from a trailer near Long Beach. "It's gotten way, way out of control."

Nationally there are signs that some drug traffickers—squeezed by tighter post 9/11 border security—are switching to high-tech cargo theft. "It's a high-gain, low-risk criminal enterprise," says Barry Brandman, president of Danbee Investigations, in Midland Park, NJ. "New organized-crime groups are specializing in logistics theft." Investigators and insurance underwriters say that Latin Americans, often dubbed "South Americans," pull many of the thefts but that Russian mobsters are muscling in (Koreans and Chinese continue to dominate the fencing). Ports in south Florida, Los Angeles and New Jersey, say law enforcement experts, continue to be trouble spots.

Increased losses from high-tech-chip theft are making security a central component of supply chain logistics. Some underwriters refuse to insure valuable high-tech cargo, especially in problematic areas. But even when insured, the victim firm loses. Deductibles are often $100,000 or more, and thefts have a ripple effect. Intel, for example, sponsored a Rand study that found that the indirect cost of a major theft is two to five times the actual loss. And valuable business relationships can be damaged when deliveries are interrupted by thefts.

Holistic approach

Although the traditional three Gs are still fundamental, several promising technologies—from pagerlike pallet-tracking devices to GPS systems and biometrically controlled ignition systems—may soon play a role in securing cargo. But experts advise a cautious, holistic approach. The bulk of the new technologies are still in beta or have yet to be fully proven in the marketplace. Many companies hire consulting firms such as Pinkerton to develop risk profiles and determine vulnerabilities in the supply chain. They then put detailed new policies and procedures in place that may include antitheft technologies. Some firms claim to have reduced individual corporate losses more than 90%, preventing tens of millions of dollars in annual losses. But experts say good security nearly always balances risk with economics. It's not a one-size-fits-all situation.

Indeed. Sun Microsystems fired back at thieves who were robbing the firm of millions in Europe with a combination of low- and high-tech measures. About a year and a half ago, Chiaramonte initiated escorts for high-value Sun trailers. He says he purposely broadcast the policy shift to the drivers, the warehouse and manufacturing. To date, says Chiaramonte, the escorted trailers have suffered "zero losses."

"During the three-or four-month hiatus, the crooks knew we were gone. It's gotten way, way out of control."
—Detective Duane Decker, Port of Los Angeles

Escorts do seem to have deterred hijackers. Other security directors concur on the value of the technique. "There are certain markets where escorts are silver bullets," notes Intel's Purtell. "It's enough." But in Latin America and parts of Asia, officials note, large gun-toting gangs have successfully snatched even well-guarded shipments. Mark Carlson, vice president of Latin America for Pinkerton in Mexico City, says the best protection against hijackings in Mexico and Brazil—where some manufacturers lose as much as 10% of finished product—is better control of shipping manifests. Major high-tech hijacks are nearly always inside jobs. "We look to see where clients may have slippage in their information control. We're in there looking for where the break is. Is it internal? Is it external?"

Securing the supply chain

Firms seeking to enhance security might consider joining the Technology Asset Protection Association (TAPA), a group that has become a leading force in improving supply chain security worldwide. Launched six years ago with just 30 member companies, it saw its membership surge by 40 percent last year to include some 500 mostly high-tech firms (pharmaceutical firms were recently admitted as well). TAPA certifies whether firms are following good supply chain security practices. Two major underwriters recently agreed to provide insurance discounts for TAPA-certified firms.

Perhaps the most basic security step a high-tech firm can take is to reevaluate its carriers. In the wake of September 11, the distributor Avnet, Chandler, AZ, set down rigorous new security standards, giving the pink slip to more than a hundred regional and local carriers. Today, the 11 remaining carriers that transport nearly 10,000 Avnet shipments daily follow strict policies. Drivers must stick to specific routes. Trailer doors are shut with tamper-proof seals, and trucks must be locked whenever the driver leaves the cab. Large shipments go only on GPS-equipped trucks and sometimes require two drivers. Avnet has also eliminated some old methods that helped crooks identify targets. Now everything ships in a plain-vanilla box with a packing slip that gives no clues as to the contents. "It doesn't say Intel, Sun or Toshiba," says Jim Smith, a senior VP at Avnet. "It looks like another common, ordinary box."

Which carriers excel at protecting high-value tech shipments is a constantly evolving, closely guarded secret. "Using FedEx and UPS may not be the most secure method, compared to shipping with a motor carrier that has expertise in the transportation of high-tech goods," asserts Rich Soja, global marine manager for Chubb, a Warren, NJ, insurance firm. Chubb shares its short list of preferred carriers with clients and helps companies implement various risk reduction strategies, such as breaking major shipments into sub-$5 million chunks.

Prompt notification of the relevant authorities is key to recovering stolen chips and components (investigations in Europe and other foreign countries are often hampered by multiple local and national jurisdictions). Throughout the United States, port-based Cargo Cat squads or high-tech crime squads are the place to start. The Los Angeles Sheriff's Cargo Cats, for instance, recommends faxing a loss claim form to its offices to speed the opening of an investigation. Prosecution is another matter. It's not easy to prove that a given pallet of chips is stolen. "In case after case, we bring product to firms and think it's easy to tell us whether it's stolen, and they can't tell us," says Special Agent Manny Alvarez, who heads the Rapid Enforcement Allied Computer Team (REACT), a multiagency high-tech crime squad based in San Jose, CA. "Companies often don't have the mechanisms in place to keep track of products."

Sun is one of the few exceptions. Before, all the firm could say was that a particular processor board came from a lot of several hundred. Now, the company's high-end servers have serial numbers and record the purchaser. Still, many companies don't see the value in marking components or keeping the detailed records necessary to prove that a specific lot of chips has been stolen. Although companies encourage aggressive prosecution of chip theft, they favor a proactive approach—practices and technologies more likely to prevent thefts.

E-tracking shipments

Companies appear more interested in electronically tagging individual pallets of products in transit. Purtell is one of many officials interested in a tracking device that could help him monitor the whereabouts of product throughout the supply chain. Locate Networks, Seattle, WA, plans to launch its new SnapTrack Assisted GPS in July. Hidden within a pallet, the pager-size battery-powered device continuously receives satellite transmissions. It shoots the transmissions over a terrestrial two-way pager network to Locate's data center. Latitudes and longitudes are mapped onto a Web site that clients can access with a password. Clients can preset approved corridors and boundaries for shipments. If a pallet strays from the prearranged route—say a half-mile corridor along a particular interstate—alert notifications can go out to logistics personnel or security directors.

Michael Crowson, Locate Networks' president, says SnapTrack has already been beta-tested by law enforcement in sting operations. In one case, its use led to the recovery of several million dollars' worth of consumer goods that were stolen from a trailer and moved onto a rental truck and then into a warehouse. "Security experts want to get their hands on it to prevent theft," says Crowson. "Others want it for pure logistics and just-in-time inventory."

But the ultimate security value of a device that tracks a pallet, trailer or truck comes from how quickly news of a possible problem can be investigated. Simply knowing that a truck or pallet has wandered off course won't necessarily thwart a theft or recover stolen chips. Tracking technologies are often combined with service from real-time communications companies, such as Criticom International, Minneapolis, MN, which monitors GPS and other signals and alerts law enforcement to thefts in progress. Depending on

the service plan, Criticom receives GPS signals via cellular connections every 10 minutes or so. Computerized call centers in Los Angeles and Minneapolis transform that raw longitude and latitude data into street addresses in about 30 seconds. If a driver hits a panic button or a trailer veers off a preset route, an agent at the call center will attempt to call the driver or establish contact through the dispatcher. Criticom agents tap into a detailed Public Safety Answering Point (PSAP) database to promptly phone the relevant local authorities and assist in locating the stolen vehicle. The firm is investigating partnerships with several manufacturers of pallet tracking devices.

Evaluating antitheft technologies

But if securing shipments is quite literally a moving target, so is staying one step ahead of the thieves. When GPS tracking services were first introduced, a few years ago, they were heralded as the technical solution to hijacking. But hijackers quickly learned to take out the antennae with a shotgun blast or a hammer (a tougher task with transmitters hidden in pallets). Even when GPS tracking devices manage to continue broadcasting during a hijacking, it's often too late when authorities arrive at the scene. Indeed, the truck the Santa Clara Christmas bandits fled in with $3 million worth of Cisco boards was GPS-equipped and was later found abandoned—and empty. "The problem with GPS is that although you recover the trailer, everything else is gone," says Chubb's Soja. "It's a developing technology."


"I get three calls a month from companies with different bells and whistles. I haven't seen anything work yet."
—Dan Purtell, Americas investigations manager for Intel

Tracking systems can also be expensive. GPS hardware generally costs $1,000 to $3,000 a vehicle, with service ranging from a few dollars to $25 or more a month. Although tracking pallets with Radio Frequency Identification (RFID) tags has been tested by several firms (including Unisys for high-value servers), the technology generally provides useful data only on the whereabouts of product in controlled environments such as ports, airports or corporate warehouses. Once on the road, shipments are likely to require other protection.

Stand-alone biometric devices may promise an entirely different way of securing high-tech cargo. Vericom Technologies, Rocklin, CA, aims to thwart attacks by making it harder to hijack trucks. The firm's biometric or PIN access devices limit the operation of the truck to the approved driver. Utilizing "black-wire technology" that makes it difficult to know which wire to cut, the hidden Vericom device cuts off fuel to the heat pump. The theory is that hijackers won't be able to start a vehicle or will find that it won't go over a couple of miles an hour. "The key is to reduce the amount of time the hijacker has" to escape, says John Bjorn, president of Vericom.

Finally, at least one start-up, Safefreight Technology, Edmonton, Alberta, Canada, offers an all-in-one security system for trucks and trailers. Piercing alarms and strobe lights go off when a thief tries to hijack a truck, move it outside of a preset digital fence, or attempt to hook up an unauthorized trailer (GPS tracking for trailers is optional). Officials believe that the ear-shattering alarm and lights will prevent many break-ins.

But security and logistics directors at major high-tech firms remain a hard sell when it comes to the new antitheft products. They say they have yet to see a probable winning solution, let alone a short list of companies to watch. "I get three calls a month from companies with different bells and whistles," says Purtell. "I haven't seen anything work yet." Experts say providers of new technology providers have to battle-test their solutions' reliability. Brandman of Danbee Investigations says 90% of the new products and services are still in beta. "Most have not been proved. We are six months to a year and a half away from having reliable product on the market."

Until then, security directors and law enforcement will do their best on limited budgets. Officials at Sun, for example, argued that the escorts for high-value trailers were too expensive. But Chiaramonte won an extension of his program by doing a study that tracked the substantial losses of other companies. In comparison, Sun's zero losses after a modest investment in escorts seemed a bargain.

Fighting theft remains an uphill battle. Sergeant Lloyd Cardone of REACT says his task force is pursuing leads on the $3 million Cisco theft in Santa Clara, and the FBI is also trying to solve an $8 million high-tech hijack last year in Guadalajara, Mexico. Meanwhile, investigators working the Heathrow incident traced a white Renault van to nearby Feltham, west London. Roughly $2.5 million in chips were recovered, but about $7.5 million worth are still missing.

The perpetrators remain at large.

Jonathan Littman is the coauthor of the best-seller the Art of Innovation and the author of The Fugitive Game.

Show Me the Money
$3 million value of Cisco routers stolen in a December 25, 2002, heist in Santa Clara
$10 million value of Pentium 4 chips stolen on January 12, 2003, in Heathrow, England
$20 million+ value of chips that manufacturers sometimes ship in a single big rig to distributors
$50 billion estimated worldwide losses from cargo theft





© by TAPA 1999-2003. All Rights Reserved. contact: info@tapaonline.org