1
00:00:01,690 --> 00:00:02,700
My name is Avery Ryan.

2
00:00:02,720 --> 00:00:04,220
I was a victim of cyber crime.

3
00:00:04,250 --> 00:00:06,690
Like you, I posted
 on social media,

4
00:00:06,720 --> 00:00:09,530
checked my bank account
 balance online,

5
00:00:09,560 --> 00:00:11,530
even kept
 the confidential files

6
00:00:11,560 --> 00:00:13,730
of my psychological practice
 on my computer.

7
00:00:15,570 --> 00:00:18,480
Then I was hacked,
 and as a result,

8
00:00:18,500 --> 00:00:20,840
one of my patients
 was murdered.

9
00:00:20,870 --> 00:00:23,470
My investigation into her death
 led me to the FBI,

10
00:00:23,510 --> 00:00:26,280
where I joined a team
 of cyber experts

11
00:00:26,310 --> 00:00:29,180
to wage a war against
 a new breed of criminal

12
00:00:29,210 --> 00:00:32,220
hiding on the Deep Web...

13
00:00:32,250 --> 00:00:35,250
infiltrating our daily lives
in ways we never imagined...

14
00:00:36,820 --> 00:00:38,790
...faceless...

15
00:00:38,820 --> 00:00:41,190
nameless...

16
00:00:41,230 --> 00:00:42,800
lurking inside our devices,

17
00:00:42,830 --> 00:00:45,430
just a keystroke away.

18
00:00:57,910 --> 00:01:00,380
KRUMITZ: We got another one.
NELSON:
That's four and counting.

19
00:01:00,410 --> 00:01:01,640
What the hell
is going on up there?

20
00:01:01,680 --> 00:01:02,810
Hold on. Yes, I'm still here.

21
00:01:02,850 --> 00:01:06,280
FAA has confirmed Wi-Fi is down
on four domestic flights,

22
00:01:06,320 --> 00:01:07,780
all Monument Air.

23
00:01:07,820 --> 00:01:08,880
Do they know why
this is happening?

24
00:01:08,920 --> 00:01:09,850
They're still looking into it.

25
00:01:09,890 --> 00:01:11,820
All right, I just spoke
to Liftoff Wireless.

26
00:01:11,860 --> 00:01:13,500
They've been trying to restore
in-flight Internet access

27
00:01:13,520 --> 00:01:14,820
on the planes,
but something is blocking them.

28
00:01:14,860 --> 00:01:15,760
I'm here. Go.

29
00:01:15,790 --> 00:01:16,790
Uh, we got a fifth.

30
00:01:16,830 --> 00:01:17,890
No, no, make it six.

31
00:01:17,930 --> 00:01:19,800
Same as the others.

32
00:01:19,830 --> 00:01:22,370
All Monument Air. Looks like
some type of coordinated attack.

33
00:01:22,400 --> 00:01:23,430
RYAN:
DHS is operating

34
00:01:23,470 --> 00:01:24,800
at National Threat Level Yellow.

35
00:01:24,830 --> 00:01:26,340
It hasn't jumped to orange yet.

36
00:01:26,370 --> 00:01:27,900
Shouldn't we call
the president or someone?

37
00:01:27,940 --> 00:01:29,240
I mean, we're talking planes.

38
00:01:29,270 --> 00:01:30,370
SIFTER:
Yeah, which is exactly why

39
00:01:30,410 --> 00:01:31,670
we don't jump to conclusions.

40
00:01:31,710 --> 00:01:32,780
We got to have some facts

41
00:01:32,810 --> 00:01:34,640
before we suggest they start
upping the threat level.

42
00:01:34,680 --> 00:01:36,150
No reports
of instrument malfunction.

43
00:01:36,180 --> 00:01:37,510
Pilots are still able
to communicate

44
00:01:37,550 --> 00:01:39,220
with the control tower.
Undercover air marshals

45
00:01:39,250 --> 00:01:41,450
haven't detected any unusual
activity either.

46
00:01:41,490 --> 00:01:43,200
What time did the Wi-Fi
go down on those flights?

47
00:01:43,220 --> 00:01:44,490
Ten minutes after takeoff.

48
00:01:44,520 --> 00:01:46,360
All right, that means
they were above 10,000 feet.

49
00:01:46,390 --> 00:01:48,560
That's when the passengers
on Monument Air can connect

50
00:01:48,590 --> 00:01:50,630
their electronic devices to
the in-flight wireless network.

51
00:01:50,660 --> 00:01:51,690
Got another one.

52
00:01:51,730 --> 00:01:52,860
Seven.

53
00:01:52,900 --> 00:01:54,860
MUNDO:
Eight.

54
00:01:54,900 --> 00:01:56,300
Nine.
SIFTER:
What the hell is this?

55
00:01:56,330 --> 00:01:58,800
Okay, okay.
What is it, Krumitz?

56
00:01:58,840 --> 00:02:00,510
Liftoff Wireless' server logs

57
00:02:00,540 --> 00:02:01,940
show only one phone
on each plane

58
00:02:01,970 --> 00:02:03,910
connected to the router and
caused Wi-Fi to go down.

59
00:02:03,940 --> 00:02:05,270
RYAN:
That means nine passengers

60
00:02:05,310 --> 00:02:07,210
on nine flights
shut off the Wi-Fi

61
00:02:07,240 --> 00:02:08,580
from within the plane?

62
00:02:08,610 --> 00:02:10,210
Sounds like
a coordinated attack to me.

63
00:02:10,250 --> 00:02:11,850
Think all nine passengers
are working together?

64
00:02:11,880 --> 00:02:14,880
Nelson, pull up
the flight routes.

65
00:02:15,890 --> 00:02:17,800
The destination cities
are all different,

66
00:02:17,820 --> 00:02:18,920
but they all originated

67
00:02:18,960 --> 00:02:21,330
from Miami International.

68
00:02:21,360 --> 00:02:22,930
I'm calling Homeland Security.

69
00:02:22,960 --> 00:02:24,430
Secretary McKnight,
this is Simon Sifter,

70
00:02:24,460 --> 00:02:25,890
Cyber Crime Division.

71
00:02:25,930 --> 00:02:27,830
We've got a potential
national security threat.

72
00:02:27,860 --> 00:02:30,600
I'm requesting
that you immediately ground

73
00:02:30,630 --> 00:02:32,500
all Monument Air flights.

74
00:02:32,540 --> 00:02:33,900
Yes, I am sure.
As you know,

75
00:02:33,940 --> 00:02:35,800
shutting down
passenger communication

76
00:02:35,840 --> 00:02:37,940
is a possible precursor
to hijacking.

77
00:02:37,970 --> 00:02:39,940
I would like
all these flights redirected

78
00:02:39,980 --> 00:02:41,810
to their nearest airports.

79
00:02:41,850 --> 00:02:42,990
Monument Air Flight 417

80
00:02:43,010 --> 00:02:45,350
is 300 miles outside of Miami.

81
00:02:45,380 --> 00:02:47,680
That's the closest
and easiest to send back.

82
00:02:47,720 --> 00:02:49,690
All right, I'll have that flight
routed back to Miami.

83
00:02:49,720 --> 00:02:52,220
Krumitz, can you tell
specifically which phone

84
00:02:52,260 --> 00:02:54,590
or passenger shut down
the Wi-Fi?
I...

85
00:02:54,620 --> 00:02:55,920
I mean, it's gonna
take some time,

86
00:02:55,960 --> 00:02:57,290
but yeah.
RYAN:
Okay.

87
00:02:57,330 --> 00:02:58,590
We need the names
and the seat numbers

88
00:02:58,630 --> 00:03:00,600
for those passengers
with the phones,

89
00:03:00,630 --> 00:03:01,900
and we need them now.

90
00:03:01,930 --> 00:03:02,870
Let's go, Elijah.

91
00:03:02,900 --> 00:03:04,900
Nelson.

92
00:03:08,810 --> 00:03:11,950
*

93
00:03:14,710 --> 00:03:16,910
Okay, all right,
all right, got it.

94
00:03:16,950 --> 00:03:18,510
All right, thanks, Krummy.

95
00:03:18,550 --> 00:03:20,980
Okay, target's sitting
in 14C.

96
00:03:21,020 --> 00:03:22,990
Plane is taxiing
to the gate right now.

97
00:03:23,020 --> 00:03:24,420
Good, what about
the other flights?

98
00:03:24,450 --> 00:03:25,790
Great.

99
00:03:25,820 --> 00:03:27,590
Local Feds are detaining
the eight suspects

100
00:03:27,620 --> 00:03:29,890
in the other cities now.

101
00:03:36,570 --> 00:03:37,800
I-I just left for vacation.

102
00:03:37,830 --> 00:03:39,700
Someone needs to tell me
what this is about.

103
00:03:42,470 --> 00:03:43,810
Can you please call my husband?

104
00:03:43,840 --> 00:03:45,740
This is crazy.

105
00:04:10,030 --> 00:04:12,370
Excuse me. Excuse me.

106
00:04:13,000 --> 00:04:16,310
Take your headphones
out, please.

107
00:04:17,670 --> 00:04:18,810
How old are you?

108
00:04:18,840 --> 00:04:20,480
16.
Have you been sitting there

109
00:04:20,510 --> 00:04:22,750
the whole flight?
Yeah. Why?

110
00:04:22,780 --> 00:04:24,650
Cuff her.

111
00:04:24,680 --> 00:04:26,720
What did I do?
What's going on?

112
00:04:26,750 --> 00:04:28,980
Stand up, place your hands
behind your back, please.

113
00:04:36,690 --> 00:04:38,060
Willa?

114
00:04:40,600 --> 00:04:41,660
Dad!

115
00:04:41,700 --> 00:04:42,870
They won't let me leave.

116
00:04:43,630 --> 00:04:45,030
What's going on here?

117
00:04:45,970 --> 00:04:47,100
My daughter was going to visit

118
00:04:47,140 --> 00:04:48,640
family in San Diego.

119
00:04:48,670 --> 00:04:50,770
I don't get it.
Are you saying she's a suspect?

120
00:04:50,810 --> 00:04:53,080
We're just trying to understand
what happened here, Mr. Hart.

121
00:04:53,110 --> 00:04:55,980
Someone hacked
into the plane's router.

122
00:04:56,010 --> 00:04:57,010
We traced that intrusion

123
00:04:57,050 --> 00:04:58,380
back to Willa's phone.

124
00:04:58,420 --> 00:04:59,660
What?

125
00:04:59,680 --> 00:05:00,620
I mean, how is that possible?

126
00:05:00,650 --> 00:05:02,750
Her cell phone serial number was
the last one

127
00:05:02,790 --> 00:05:06,020
that logged on to the onboard
router before it crashed.

128
00:05:06,060 --> 00:05:09,100
We ran that number through
every cell carrier's database

129
00:05:09,130 --> 00:05:10,140
till it spit out a name.

130
00:05:10,160 --> 00:05:11,090
Willa's name?

131
00:05:11,130 --> 00:05:12,930
We matched that name
to the flight manifest.

132
00:05:12,960 --> 00:05:14,030
It gave us a seat number.

133
00:05:14,060 --> 00:05:15,600
Willa,

134
00:05:15,630 --> 00:05:17,100
did you leave
your phone anywhere?

135
00:05:17,130 --> 00:05:19,000
Did you bump your device
with anyone?

136
00:05:19,040 --> 00:05:21,450
Did you text
or download anything?

137
00:05:22,810 --> 00:05:24,510
Go ahead, sweetheart.
Just answer

138
00:05:24,540 --> 00:05:25,810
her questions.

139
00:05:25,840 --> 00:05:26,940
I texted some friends,

140
00:05:26,980 --> 00:05:28,010
but I do that all the time.

141
00:05:28,040 --> 00:05:30,810
I was just listening to music
and playing Dots.

142
00:05:30,850 --> 00:05:32,110
Hmm.

143
00:05:33,820 --> 00:05:35,080
What's he doing?

144
00:05:35,120 --> 00:05:37,450
Imaging your phone,
making a duplicate copy

145
00:05:37,490 --> 00:05:40,120
of your device to determine
what killed the Wi-Fi.

146
00:05:40,160 --> 00:05:41,490
Can I have it back?

147
00:05:43,030 --> 00:05:44,890
Once we're done with it.
Right now I want you to tell me

148
00:05:44,930 --> 00:05:48,100
everything that happened
before your flight took off.

149
00:05:48,130 --> 00:05:51,400
My dad dropped me
at the curb.

150
00:05:51,440 --> 00:05:52,750
I checked my bag,

151
00:05:52,770 --> 00:05:54,670
went through security,

152
00:05:54,700 --> 00:05:56,570
had a smoothie.

153
00:05:56,610 --> 00:05:58,710
I bought it at Mango Mel's.

154
00:05:58,740 --> 00:06:01,480
And then I waited at the gate
for my flight.

155
00:06:01,510 --> 00:06:03,710
Does the name Audrey Monroe

156
00:06:03,750 --> 00:06:06,880
mean anything to you?

157
00:06:06,920 --> 00:06:08,120
How about Ken Galvin?

158
00:06:09,120 --> 00:06:11,090
Margaret Sloane?

159
00:06:11,120 --> 00:06:12,920
What do they have to do
with Willa?

160
00:06:12,960 --> 00:06:15,120
Your daughter's phone's not the
only one that cut off the Wi-Fi.

161
00:06:15,160 --> 00:06:16,630
It happened
on eight other flights.

162
00:06:16,660 --> 00:06:17,790
Lee Yang?

163
00:06:17,830 --> 00:06:19,500
Jason Hawking?

164
00:06:19,530 --> 00:06:20,800
I don't know
any of these people.

165
00:06:20,830 --> 00:06:21,960
Well, it's clear to me,
and it should be to you,

166
00:06:22,000 --> 00:06:25,000
that my daughter didn't have
anything to do with this.

167
00:06:25,030 --> 00:06:26,670
She's just a kid.

168
00:06:26,700 --> 00:06:28,170
Mr. Hart, in my line of work,

169
00:06:28,200 --> 00:06:30,910
"just a kid"
doesn't mean anything.

170
00:06:34,110 --> 00:06:36,110
Hey, yo, E.

171
00:06:36,150 --> 00:06:37,890
It's getting ugly
over there, man.

172
00:06:37,910 --> 00:06:39,820
Yeah, well,
their flight's been grounded

173
00:06:39,850 --> 00:06:41,150
and they haven't been given
an explanation.

174
00:06:41,180 --> 00:06:42,490
You'd be angry, too.

175
00:06:42,520 --> 00:06:44,590
Well, you're right.

176
00:06:44,620 --> 00:06:47,120
So, I ran diagnostics
on the plane's router.

177
00:06:47,160 --> 00:06:49,730
One device overloaded
the entire system.

178
00:06:49,760 --> 00:06:51,630
It was
a denial-of-service attack.

179
00:06:51,660 --> 00:06:53,230
PILOT:
Ladies and gentlemen,

180
00:06:53,260 --> 00:06:56,670
at this time,
Liftoff Wireless' Wi-Fi service

181
00:06:56,700 --> 00:06:58,900
is available
at a charge of $9.99

182
00:06:58,940 --> 00:07:00,250
for the duration of the flight.

183
00:07:00,270 --> 00:07:02,200
Thank you.

184
00:07:02,240 --> 00:07:04,240
NELSON:
 Willa's phone prevented
 any other passenger's device

185
00:07:04,270 --> 00:07:05,610
from connecting to the Wi-Fi.

186
00:07:09,950 --> 00:07:12,150
Phones aren't supposed to send
that many data packets at once.

187
00:07:12,180 --> 00:07:13,220
Yeah, unless a hacker

188
00:07:13,250 --> 00:07:14,780
with some skills worked
their magic.

189
00:07:14,820 --> 00:07:15,850
Uh-huh.

190
00:07:15,890 --> 00:07:17,160
I'll go ahead and unplug
the router from the plane.

191
00:07:17,190 --> 00:07:18,250
I'll send it back to CTOC.

192
00:07:18,290 --> 00:07:20,220
Do that.
All right.

193
00:07:20,260 --> 00:07:22,160
Anything from
our FBI field teams?

194
00:07:22,190 --> 00:07:23,590
SIFTER:
Well, they've interrogated

195
00:07:23,630 --> 00:07:25,030
the other eight suspects.

196
00:07:25,060 --> 00:07:26,630
They're all
from different cities.

197
00:07:26,660 --> 00:07:28,160
They span multiple generations,

198
00:07:28,200 --> 00:07:30,930
and they've all got
varying levels of technology,

199
00:07:30,970 --> 00:07:33,800
and they all allege
they have no idea what happened.

200
00:07:33,840 --> 00:07:35,240
Willa Hart said the same thing.

201
00:07:35,270 --> 00:07:36,910
She has no clue
what's going on.

202
00:07:36,940 --> 00:07:37,970
Field teams confiscated

203
00:07:38,010 --> 00:07:39,270
our suspects' phones.

204
00:07:39,310 --> 00:07:40,240
They're imaging them now.

205
00:07:40,280 --> 00:07:41,540
Data should be here any minute.

206
00:07:41,580 --> 00:07:43,750
So, Avery, I've made
a lot of moves here.

207
00:07:43,780 --> 00:07:45,250
There are gonna be
a lot of questions.

208
00:07:45,280 --> 00:07:47,180
So, from your end,
what does this look like?

209
00:07:47,220 --> 00:07:48,980
I'm not sure yet,

210
00:07:49,020 --> 00:07:51,090
but I'm not willing
to give up on the idea

211
00:07:51,120 --> 00:07:52,120
that these people are connected.

212
00:07:52,160 --> 00:07:53,800
(register dings)

213
00:07:53,820 --> 00:07:55,260
I'm sorry, ma'am,
this one didn't work either.

214
00:07:55,290 --> 00:07:57,190
Two of my credit cards
have been declined?

215
00:07:57,230 --> 00:07:59,060
That's impossible.

216
00:07:59,100 --> 00:08:00,210
No, I didn't buy ten laptops.

217
00:08:00,230 --> 00:08:01,700
I don't even shop
at that store.

218
00:08:01,730 --> 00:08:04,630
(phones ringing,
overlapping chatter)

219
00:08:06,570 --> 00:08:07,600
Avery, what's happening?

220
00:08:07,640 --> 00:08:08,640
I'm not sure yet. Hold on.

221
00:08:08,670 --> 00:08:09,870
Let me flip view.

222
00:08:09,910 --> 00:08:11,310
(ringing, chattering)

223
00:08:11,340 --> 00:08:13,140
It suddenly just got
very noisy in here.

224
00:08:13,180 --> 00:08:14,680
Yeah, my credit card's
been denied.

225
00:08:14,710 --> 00:08:16,550
What do you mean you don't
know what's going on?

226
00:08:16,580 --> 00:08:17,880
It happened on your plane.

227
00:08:20,950 --> 00:08:23,220
Are you seeing this?

228
00:08:23,250 --> 00:08:25,250
MAN:
All of my credit cards

229
00:08:25,290 --> 00:08:26,090
cannot be maxed out.
How is that even possible?

230
00:08:26,120 --> 00:08:28,560
All of these people
were passengers

231
00:08:28,590 --> 00:08:31,030
on Willa Hart's flight.

232
00:08:31,060 --> 00:08:32,060
Simon,

233
00:08:32,100 --> 00:08:34,340
I know what this is.

234
00:08:34,360 --> 00:08:36,200
This is a credit card heist.

235
00:08:36,230 --> 00:08:38,700
Dozens of people
who got off that plane

236
00:08:38,740 --> 00:08:40,110
are starting to receive alerts

237
00:08:40,140 --> 00:08:41,670
that their credit cards
have been frozen.

238
00:08:41,710 --> 00:08:43,080
Someone stole their information.

239
00:08:43,110 --> 00:08:45,310
That's it, that's it, that's it.

240
00:08:45,340 --> 00:08:46,370
'Cause a plane

241
00:08:46,410 --> 00:08:48,880
is the one place where people
are held captive.

242
00:08:48,910 --> 00:08:50,280
You can't connect

243
00:08:50,310 --> 00:08:53,850
to the rest of the world
if the Wi-Fi is down.

244
00:08:53,880 --> 00:08:56,120
The passengers wouldn't even
know that they'd been robbed

245
00:08:56,150 --> 00:08:58,250
till they got off the plane
and connected to the Internet.

246
00:08:58,290 --> 00:08:59,320
I don't believe this.

247
00:08:59,360 --> 00:09:01,630
What?
This can't be right.

248
00:09:01,660 --> 00:09:03,030
I've seen this before.

249
00:09:03,060 --> 00:09:04,960
There it is again and again.

250
00:09:04,990 --> 00:09:06,190
He uses
a unique signature

251
00:09:06,230 --> 00:09:07,630
when writing code.

252
00:09:07,660 --> 00:09:08,630
He?

253
00:09:08,670 --> 00:09:09,710
What is it, Krumitz?

254
00:09:09,730 --> 00:09:11,300
I know who did it.

255
00:09:12,300 --> 00:09:13,800
Lomis.

256
00:09:13,840 --> 00:09:15,140
Lomis is behind this,

257
00:09:15,170 --> 00:09:17,170
and it's just the beginning.

258
00:09:21,750 --> 00:09:27,890
* I know you've deceived me,
now here's a surprise *

259
00:09:29,820 --> 00:09:35,360
* I know that you have, 'cause
there's magic in my eyes *

260
00:09:35,390 --> 00:09:39,730
* I can see
for miles and miles *

261
00:09:39,760 --> 00:09:43,070
* I can see for miles
and miles *

262
00:09:43,100 --> 00:09:47,640
* I can see
for miles and miles *

263
00:09:47,670 --> 00:09:51,110
* And miles...

264
00:09:51,140 --> 00:09:53,640
* Oh, yeah.

265
00:10:05,890 --> 00:10:07,890
I can't believe
this is Lomis.

266
00:10:07,920 --> 00:10:09,860
He's like a hacker legend.

267
00:10:09,890 --> 00:10:12,260
Came out of nowhere
a few years back.

268
00:10:12,300 --> 00:10:15,170
Now, they say he's in his 30s,
good-looking,

269
00:10:15,200 --> 00:10:16,360
comes from Estonia.

270
00:10:16,400 --> 00:10:18,330
Sounds like
a little hacker envy, Nelson.

271
00:10:18,370 --> 00:10:19,330
No. (chuckles)

272
00:10:19,370 --> 00:10:20,740
Look, it's admiration.

273
00:10:20,770 --> 00:10:22,070
Lomis lives up to his name.

274
00:10:22,110 --> 00:10:23,850
It's leetspeak
for "low missile."

275
00:10:23,870 --> 00:10:24,940
Flies under the radar.

276
00:10:24,970 --> 00:10:26,110
He's only surfaced twice.

277
00:10:26,140 --> 00:10:29,040
Both times at DefCon in Vegas.

278
00:10:29,080 --> 00:10:29,910
That's it.

279
00:10:29,950 --> 00:10:32,380
All right, over $400,000
have been stolen

280
00:10:32,420 --> 00:10:34,260
in our credit card scam
and over 300 people

281
00:10:34,280 --> 00:10:35,820
have reported theft.

282
00:10:35,850 --> 00:10:36,950
There's no telling

283
00:10:36,990 --> 00:10:39,420
when this is gonna end.

284
00:10:39,460 --> 00:10:41,470
(Nelson whoops)

285
00:10:41,490 --> 00:10:42,890
NELSON:
See?

286
00:10:42,930 --> 00:10:45,990
Now that's what I call
traveling in style.

287
00:10:46,030 --> 00:10:48,830
RYAN: Sifter has connections
with the Coast Guard,

288
00:10:48,870 --> 00:10:51,910
so Krumitz gets a free escort
from D.C. to Miami.

289
00:11:06,050 --> 00:11:07,450
NELSON:
Nice ride, bro!

290
00:11:07,480 --> 00:11:09,350
It's the only
way to fly!

291
00:11:11,390 --> 00:11:14,120
Krumitz, you're sure
this is Lomis?

292
00:11:14,160 --> 00:11:16,360
Every bone in my body
says I'm right.

293
00:11:16,390 --> 00:11:17,960
This is how
he works.

294
00:11:17,990 --> 00:11:19,860
When the Wi-Fi intrusion
on the planes

295
00:11:19,900 --> 00:11:22,030
connected to the credit cards,
I knew it was him.

296
00:11:22,070 --> 00:11:23,340
Sounds like a hunch.

297
00:11:23,370 --> 00:11:25,000
And your obsession
with catching a guy

298
00:11:25,030 --> 00:11:26,300
you've been chasing
for the last three years.

299
00:11:27,040 --> 00:11:29,170
But it's not.

300
00:11:29,210 --> 00:11:31,020
Before I left CTOC,

301
00:11:31,040 --> 00:11:32,140
I found a connection

302
00:11:32,180 --> 00:11:34,450
between the nine suspects
and Lomis.

303
00:11:34,480 --> 00:11:36,110
I discovered a malicious script

304
00:11:36,150 --> 00:11:38,320
buried deep in
the nine suspects' phones.

305
00:11:38,350 --> 00:11:40,150
The code exploited
a vulnerability

306
00:11:40,180 --> 00:11:41,320
in the operating system.

307
00:11:41,350 --> 00:11:44,190
(beeping)

308
00:11:44,220 --> 00:11:45,820
NELSON:
Yeah, that's his signature.

309
00:11:45,860 --> 00:11:48,230
A custom code that gains
complete control over the OS

310
00:11:48,260 --> 00:11:51,030
and suffocates the security
features like a boa constrictor.

311
00:11:51,060 --> 00:11:52,260
Means he can do
whatever he wants

312
00:11:52,300 --> 00:11:53,870
with any of the phones...

313
00:11:55,400 --> 00:11:56,930
...steal your identity,

314
00:11:56,970 --> 00:11:58,030
access personal info,

315
00:11:58,070 --> 00:11:59,400
even attach malware.

316
00:11:59,440 --> 00:12:00,980
It doesn't make
sense, though.

317
00:12:01,000 --> 00:12:02,170
I mean, in the past,

318
00:12:02,210 --> 00:12:03,480
Lomis robbed a New
York hedge fund,

319
00:12:03,510 --> 00:12:04,540
the payroll

320
00:12:04,570 --> 00:12:06,070
at San Francisco PD,

321
00:12:06,110 --> 00:12:07,440
even went after
an NHL team.

322
00:12:07,480 --> 00:12:09,310
Now this?
RYAN:
You're right. Credit cards

323
00:12:09,350 --> 00:12:13,030
and planes doesn't really fit
his behavioral profile.

324
00:12:13,050 --> 00:12:14,150
It's not what he does.

325
00:12:14,180 --> 00:12:15,420
It's how he does it.

326
00:12:15,450 --> 00:12:17,990
He starts with creating chaos

327
00:12:18,020 --> 00:12:19,320
and it grows
into something bigger.

328
00:12:19,360 --> 00:12:21,070
That's what this is.
MUNDO:
If Lomis is the one behind

329
00:12:21,090 --> 00:12:22,790
this credit
card heist,

330
00:12:22,830 --> 00:12:24,060
it means that none of our
nine suspects even knew

331
00:12:24,090 --> 00:12:25,190
the suspicious script
was on their phones.

332
00:12:25,230 --> 00:12:27,930
Means Willa Hart and the rest
of the eight passengers

333
00:12:27,960 --> 00:12:29,000
are all victims.

334
00:12:29,030 --> 00:12:30,230
Call the FBI field teams,

335
00:12:30,270 --> 00:12:31,500
have everyone we've
been holding released.

336
00:12:31,530 --> 00:12:32,500
Nelson...
Yes?

337
00:12:32,540 --> 00:12:33,850
Follow the credit card trail.

338
00:12:33,870 --> 00:12:35,140
Look for any purchases
that stand out.

339
00:12:35,170 --> 00:12:36,140
Okay.

340
00:12:36,170 --> 00:12:38,140
Krumitz, check for the code

341
00:12:38,170 --> 00:12:40,440
Lomis placed on the rest of
the victims' cell phones.

342
00:12:40,480 --> 00:12:42,180
We're about to catch
a white whale.

343
00:12:43,210 --> 00:12:44,580
No, that's done.

344
00:12:44,610 --> 00:12:46,380
We alerted
the credit card companies

345
00:12:46,420 --> 00:12:48,430
and it should be
a day or two, and ...

346
00:12:48,450 --> 00:12:49,890
Yeah-- hey, Mike.

347
00:12:49,920 --> 00:12:51,890
Gotta call you back.
Thanks.

348
00:12:51,920 --> 00:12:55,120
Colin, I haven't had a chance
to congratulate you

349
00:12:55,160 --> 00:12:56,420
on your
promotion yet.

350
00:12:56,460 --> 00:12:58,130
Deputy director.
That's-that's big.

351
00:12:58,160 --> 00:12:59,930
Thank you, Simon, but I'm not
here to talk about that.

352
00:12:59,960 --> 00:13:02,560
The director just
called me to ask

353
00:13:02,600 --> 00:13:05,370
why you grounded all Monument
Air flights out of Miami.

354
00:13:05,400 --> 00:13:06,940
I managed to support
your decision,

355
00:13:06,970 --> 00:13:09,200
despite the fact that I
knew nothing about it.

356
00:13:09,240 --> 00:13:10,440
You should have
brought me up to speed.

357
00:13:10,470 --> 00:13:12,370
There was no time
to bring you up to speed.

358
00:13:12,410 --> 00:13:14,980
Cyber crime
moves fast here, Colin.

359
00:13:15,010 --> 00:13:17,150
Regardless, you should have
consulted me first.

360
00:13:18,920 --> 00:13:21,190
Look, I-I've always
had the authority

361
00:13:21,220 --> 00:13:22,890
to kind of run my own division.

362
00:13:22,920 --> 00:13:25,220
Wait, are you... you telling me
the rules have changed?

363
00:13:25,250 --> 00:13:28,090
I'm telling you
I should have been told.

364
00:13:28,120 --> 00:13:29,290
I don't want to lose sleep

365
00:13:29,330 --> 00:13:30,470
worrying if you're gonna
keep me up to speed

366
00:13:30,490 --> 00:13:31,930
on everything I need to know.

367
00:13:31,960 --> 00:13:34,130
I grounded those planes
to save lives

368
00:13:34,160 --> 00:13:38,230
and prevent a possible
national security threat, okay?

369
00:13:38,270 --> 00:13:40,540
I had to make a tough,
split-second decision.

370
00:13:40,570 --> 00:13:43,070
You cost an airline
millions of dollars.

371
00:13:43,110 --> 00:13:44,470
W-What... what is this?

372
00:13:44,510 --> 00:13:46,910
Are you... are you scolding me?

373
00:13:46,940 --> 00:13:49,980
From now on,
you keep me in the loop.

374
00:13:50,010 --> 00:13:51,980
You report to me.

375
00:13:52,020 --> 00:13:54,030
I report to the director.

376
00:13:57,950 --> 00:13:59,650
Understood.

377
00:13:59,690 --> 00:14:00,660
(door closes)

378
00:14:00,690 --> 00:14:02,990
*

379
00:14:03,030 --> 00:14:04,990
Yes!

380
00:14:05,030 --> 00:14:06,930
RYAN:
What is it?

381
00:14:06,960 --> 00:14:07,860
This is great.

382
00:14:07,900 --> 00:14:09,630
I've been thinking
about this all wrong.

383
00:14:09,670 --> 00:14:11,010
That doesn't
sound great.

384
00:14:11,030 --> 00:14:11,900
No, it is.

385
00:14:11,940 --> 00:14:13,310
Because I realized
that the code itself

386
00:14:13,340 --> 00:14:14,300
is not going to help us
find Lomis.

387
00:14:14,340 --> 00:14:17,040
I'm still waiting
on the "great" here, bud.

388
00:14:17,070 --> 00:14:19,310
How the code got onto
the phones is the key.

389
00:14:19,340 --> 00:14:20,610
That's a
pairing record.

390
00:14:20,640 --> 00:14:22,950
Yep.
A history of the last device

391
00:14:22,980 --> 00:14:24,050
a phone synced with.

392
00:14:24,080 --> 00:14:26,480
All these phones paired
with the exact same device.

393
00:14:26,520 --> 00:14:27,430
KRUMITZ:
Bingo.

394
00:14:27,450 --> 00:14:29,480
And all the time stamps
are within an hour

395
00:14:29,520 --> 00:14:31,120
before our victims'
flights took off.

396
00:14:31,150 --> 00:14:32,520
That means they picked up
Lomis' malicious script

397
00:14:32,560 --> 00:14:33,970
somewhere in
this terminal.

398
00:14:33,990 --> 00:14:35,320
NELSON:
There's at least
50 different ways

399
00:14:35,360 --> 00:14:36,360
to infect a phone.

400
00:14:41,600 --> 00:14:43,230
Lomis is clever.

401
00:14:43,270 --> 00:14:45,270
He picked a place where he could
install his malicious script

402
00:14:45,300 --> 00:14:47,670
on multiple victims' phones,
all at the same time.

403
00:14:47,700 --> 00:14:49,500
We're looking for
a watering hole.

404
00:14:49,540 --> 00:14:50,640
Maximize the
number of victims,

405
00:14:50,670 --> 00:14:52,040
maximize the
credit card info.

406
00:14:54,610 --> 00:14:56,280
MUNDO:
Right there.

407
00:14:56,310 --> 00:14:57,280
They plugged their phone
in to get a charge,

408
00:14:57,310 --> 00:14:58,080
he stole
their data.

409
00:14:58,110 --> 00:14:59,410
RYAN:
No, that charging station

410
00:14:59,450 --> 00:15:00,420
is off the beaten path.

411
00:15:00,450 --> 00:15:01,680
Infrequent traffic.

412
00:15:01,720 --> 00:15:03,350
He would have chosen
a high-traffic station

413
00:15:03,390 --> 00:15:05,290
for his victims.

414
00:15:09,490 --> 00:15:12,230
MUNDO:
That's our crime scene.

415
00:15:16,530 --> 00:15:18,500
RYAN:
When someone plugs in
their phone to charge,

416
00:15:18,530 --> 00:15:20,140
their info is being stolen.

417
00:15:24,110 --> 00:15:26,070
This was juice jacking.

418
00:15:26,110 --> 00:15:27,140
All right.

419
00:15:27,180 --> 00:15:29,340
I'll call the airline,

420
00:15:29,380 --> 00:15:30,480
get the passenger manifest
for every flight

421
00:15:30,510 --> 00:15:31,580
that left the terminal
this morning.

422
00:15:31,610 --> 00:15:32,550
We need to find everyone

423
00:15:32,580 --> 00:15:33,620
who's carrying this malware
on their device.

424
00:15:33,650 --> 00:15:35,650
Krumitz, I need you
to clear all the passengers

425
00:15:35,680 --> 00:15:36,580
from this area.

426
00:15:36,620 --> 00:15:38,590
Nelson, start removing
all the malicious

427
00:15:38,620 --> 00:15:40,360
script from everyone's phone.

428
00:15:40,390 --> 00:15:41,990
We need to shut this down now.

429
00:15:44,230 --> 00:15:45,560
FBI!

430
00:15:45,590 --> 00:15:46,730
Everyone unplug.

431
00:15:46,760 --> 00:15:48,430
MAN:
What? Hey.

432
00:15:48,460 --> 00:15:50,030
WOMAN:
My phone is dead.

433
00:15:51,500 --> 00:15:52,670
Hey, don't unplug my phone.

434
00:15:52,700 --> 00:15:53,700
It's dead.

435
00:15:55,040 --> 00:15:56,340
Tell me something, sir.

436
00:15:56,370 --> 00:15:58,570
Have you ever heard
of juice jacking?

437
00:15:58,610 --> 00:16:00,010
No, and I don't care to.

438
00:16:01,810 --> 00:16:03,480
You see
this cord?

439
00:16:03,510 --> 00:16:04,650
It charges your phone, right?

440
00:16:04,680 --> 00:16:06,050
Nice. Safe.

441
00:16:06,080 --> 00:16:07,420
You think it's your friend.

442
00:16:07,450 --> 00:16:09,480
But you see this connector
on the end?

443
00:16:09,520 --> 00:16:11,190
Yeah. It's a USB plug.

444
00:16:11,220 --> 00:16:13,120
Not exactly groundbreaking
stuff, guy.

445
00:16:13,160 --> 00:16:14,420
Hmm.

446
00:16:14,460 --> 00:16:15,620
Maybe this'll impress you.

447
00:16:15,660 --> 00:16:19,060
Most people don't realize
that this cord has four ports.

448
00:16:19,100 --> 00:16:21,210
Two for power,
which charge your phone,

449
00:16:21,230 --> 00:16:24,430
and two for data,
which transfer--

450
00:16:24,470 --> 00:16:25,500
yes,

451
00:16:25,530 --> 00:16:27,300
you guessed it-- your data.

452
00:16:27,340 --> 00:16:29,740
Now, what do
you think your phone

453
00:16:29,770 --> 00:16:31,540
was doing just now, guy?

454
00:16:31,570 --> 00:16:32,740
Charging.

455
00:16:32,780 --> 00:16:34,490
KRUMITZ:
 Wrong.

456
00:16:34,510 --> 00:16:35,510
Stealing your data.

457
00:16:35,540 --> 00:16:37,150
You just wanted a charge,

458
00:16:37,180 --> 00:16:38,410
and you had no idea

459
00:16:38,450 --> 00:16:40,280
that a hacker had installed

460
00:16:40,320 --> 00:16:41,450
a juice-jacking
device

461
00:16:41,480 --> 00:16:42,720
that allows him to steal
your credit cards,

462
00:16:42,750 --> 00:16:45,220
your photos, your videos,

463
00:16:45,250 --> 00:16:46,620
everything on your phone.

464
00:16:47,660 --> 00:16:49,390
Now, if you just go get in line

465
00:16:49,430 --> 00:16:50,470
and talk to that

466
00:16:50,490 --> 00:16:51,830
short gentleman
trying to pull off

467
00:16:51,860 --> 00:16:53,130
the purple paisley tie,

468
00:16:53,160 --> 00:16:54,660
he's gonna take
the malicious script

469
00:16:54,700 --> 00:16:55,700
off your phone for you.

470
00:16:55,730 --> 00:16:56,730
Problem solved.

471
00:16:59,170 --> 00:17:01,770
Thank you.

472
00:17:10,750 --> 00:17:12,110
Got it.

473
00:17:12,150 --> 00:17:13,520
Patient zero.

474
00:17:13,550 --> 00:17:15,380
Mm!

475
00:17:15,420 --> 00:17:17,690
I need the north side of
the terminal cleared out.

476
00:17:17,720 --> 00:17:19,290
No one goes
in or out.

477
00:17:19,320 --> 00:17:21,320
This is a crime
scene now.

478
00:17:21,360 --> 00:17:22,420
Excuse me, ma'am? Sir?

479
00:17:22,460 --> 00:17:23,730
I need you to clear the area.

480
00:17:23,760 --> 00:17:26,090
Pardon me, miss.

481
00:17:26,130 --> 00:17:27,130
Ma'am?

482
00:17:40,710 --> 00:17:41,740
(crowd talking excitedly)

483
00:17:45,210 --> 00:17:46,450
MUNDO:
The vic's name was
Rachel Carrington,

484
00:17:46,480 --> 00:17:48,380
a grad student
at the University of Miami.

485
00:17:48,420 --> 00:17:49,480
Worked here part time

486
00:17:49,520 --> 00:17:51,750
to put herself through school.
What did she do here?

487
00:17:51,790 --> 00:17:53,690
She was a credit card sales rep
for Monument Air.

488
00:17:53,720 --> 00:17:55,220
She worked at the
charging station,

489
00:17:55,260 --> 00:17:56,290
trying to get
people to sign up

490
00:17:56,330 --> 00:17:58,170
for their new
Peak Miles card.

491
00:17:58,190 --> 00:17:58,890
Local Feds just contacted
her family in Phoenix.

492
00:17:58,930 --> 00:18:00,200
They're flying in now.

493
00:18:00,230 --> 00:18:02,130
Did the coroner
determine the COD?

494
00:18:02,170 --> 00:18:04,910
Preliminary report
is blunt force trauma.

495
00:18:04,930 --> 00:18:06,870
They found traces of blood
in the women's restroom.

496
00:18:06,900 --> 00:18:08,370
They haven't ruled it
a homicide yet,

497
00:18:08,400 --> 00:18:11,240
but there are signs
of a struggle.

498
00:18:11,270 --> 00:18:13,580
Honestly...

499
00:18:13,610 --> 00:18:15,280
it's not
adding up for me.

500
00:18:15,310 --> 00:18:16,380
Hackers aren't murderers.

501
00:18:16,410 --> 00:18:17,380
Neither are robbers,

502
00:18:17,410 --> 00:18:18,580
until something goes wrong

503
00:18:18,610 --> 00:18:19,910
and they become
desperate.

504
00:18:19,950 --> 00:18:21,380
We need to gain access

505
00:18:21,420 --> 00:18:22,820
to the security footage
in the airport.

506
00:18:22,850 --> 00:18:24,390
I'm on it.

507
00:18:24,420 --> 00:18:25,390
Guys!

508
00:18:25,420 --> 00:18:26,750
Guys, wait!
Wait.

509
00:18:26,790 --> 00:18:28,420
Remember when Krumitz said

510
00:18:28,460 --> 00:18:30,290
that Lomis likes
to start off with chaos

511
00:18:30,330 --> 00:18:31,430
and then it grows
into something bigger?

512
00:18:31,460 --> 00:18:32,630
Yeah?

513
00:18:32,660 --> 00:18:34,560
Well, it just happened.

514
00:18:34,600 --> 00:18:37,770
I was removing the malicious
script from the phone

515
00:18:37,800 --> 00:18:40,770
and suddenly I got locked out.

516
00:18:40,800 --> 00:18:41,940
Look at this.

517
00:18:41,970 --> 00:18:43,310
RYAN:
"Hi, Chelsea.

518
00:18:43,340 --> 00:18:44,370
"You're phone's been hijacked.

519
00:18:44,410 --> 00:18:46,270
"What would
your fiancé Joey think

520
00:18:46,310 --> 00:18:47,940
"if he saw you being
a dirty slut?

521
00:18:47,980 --> 00:18:50,580
"Reply with a 14-digit
prepaid cash voucher

522
00:18:50,610 --> 00:18:53,450
"for $250 in the next 24 hours,

523
00:18:53,480 --> 00:18:54,550
this goes away."

524
00:18:54,580 --> 00:18:56,280
This is ransomware.

525
00:18:56,320 --> 00:18:57,120
Krumitz said

526
00:18:57,150 --> 00:18:58,790
the malicious script
is a custom code

527
00:18:58,820 --> 00:18:59,950
that strangles
the operating system

528
00:18:59,990 --> 00:19:02,220
and allows Lomis complete
control over all the phones.

529
00:19:02,260 --> 00:19:03,760
Lomis just stepped up his game.

530
00:19:03,790 --> 00:19:05,730
Now he's holding
the phones hostage.

531
00:19:05,760 --> 00:19:07,960
We stopped his payday;
now he's retaliating.

532
00:19:08,000 --> 00:19:08,960
Nelson, I need you

533
00:19:09,000 --> 00:19:11,200
to get back to D.C.
Stay on top of

534
00:19:11,230 --> 00:19:12,330
the stolen credit cards

535
00:19:12,370 --> 00:19:13,970
and crack that ransomware.

536
00:19:14,000 --> 00:19:15,940
Done. Um...

537
00:19:15,970 --> 00:19:17,870
Is there gonna be
peanuts and pretzels

538
00:19:17,910 --> 00:19:18,970
on the Coast Guard chopper?

539
00:19:19,010 --> 00:19:21,240
(laughs)

540
00:19:25,310 --> 00:19:27,250
Is this some kind of sick joke?
No.

541
00:19:27,280 --> 00:19:29,220
It's completely frozen.

542
00:19:29,250 --> 00:19:30,220
Someone put ransomware on it.

543
00:19:30,250 --> 00:19:31,590
You mean

544
00:19:31,620 --> 00:19:34,990
by charging my phone,
 all this happened?

545
00:19:35,020 --> 00:19:36,960
RYAN:
 Yes.

546
00:19:36,990 --> 00:19:39,330
A hacker took control of
 your phone and locked you out

547
00:19:39,360 --> 00:19:41,260
until you pay the amount
 that he's demanding.

548
00:19:41,300 --> 00:19:42,360
He has personal information.

549
00:19:42,400 --> 00:19:44,670
He knows my fiancé's name.

550
00:19:44,700 --> 00:19:46,470
Not only did he lock you out,

551
00:19:46,500 --> 00:19:48,340
he accessed your personal data--

552
00:19:48,370 --> 00:19:51,440
your messages,
phone calls, pictures.

553
00:19:51,470 --> 00:19:52,610
What is he going to do with it?

554
00:19:52,640 --> 00:19:53,880
Well, he's threatening
to release it

555
00:19:53,910 --> 00:19:55,280
if you don't pay.

556
00:19:56,710 --> 00:19:58,280
What did he find on that phone

557
00:19:58,310 --> 00:20:00,210
you don't want
your fiancé to see?

558
00:20:04,490 --> 00:20:05,720
Am I really expected to pay

559
00:20:05,750 --> 00:20:08,460
$250,000 to
unlock my phone?

560
00:20:08,490 --> 00:20:10,730
Senator, we don't suggest
you pay this ransom.

561
00:20:10,760 --> 00:20:11,860
And when I don't?

562
00:20:11,890 --> 00:20:13,730
Any number of
things can happen.

563
00:20:13,760 --> 00:20:15,260
Could you try to be
a little more specific?

564
00:20:15,300 --> 00:20:18,000
All right. As that text
you received threatens,

565
00:20:18,030 --> 00:20:19,730
he will post all of
your personal information

566
00:20:19,770 --> 00:20:20,900
on the Internet.

567
00:20:20,940 --> 00:20:22,300
SENATOR:
I just flew back

568
00:20:22,340 --> 00:20:23,640
from a family trip to Miami

569
00:20:23,670 --> 00:20:24,940
and simply charged my phone,

570
00:20:24,970 --> 00:20:26,540
and now this happens?

571
00:20:26,580 --> 00:20:27,750
What action are you taking?

572
00:20:27,780 --> 00:20:29,040
We're working
some promising leads.

573
00:20:29,080 --> 00:20:30,040
We've...
(scoffs)

574
00:20:30,080 --> 00:20:32,310
Really, gentlemen?

575
00:20:32,350 --> 00:20:33,380
Really?

576
00:20:33,420 --> 00:20:34,280
Our government
appropriates

577
00:20:34,320 --> 00:20:36,480
a lot of money to
the Cyber Division,

578
00:20:36,520 --> 00:20:38,290
and "promising leads"?

579
00:20:38,320 --> 00:20:39,290
Is that the best you can do?

580
00:20:39,320 --> 00:20:40,460
These things take time.

581
00:20:40,490 --> 00:20:43,060
Time is not something I have.

582
00:20:43,090 --> 00:20:43,990
19 hours from now,

583
00:20:44,030 --> 00:20:46,530
the highly sensitive
government material

584
00:20:46,560 --> 00:20:48,000
on this phone goes public.

585
00:20:48,030 --> 00:20:51,430
Senator, look,
all due respect...

586
00:20:51,470 --> 00:20:54,440
I mean, you know better
than to keep

587
00:20:54,470 --> 00:20:58,510
sensitive government documents
on a personal phone, so...

588
00:20:58,540 --> 00:21:00,340
what exactly
are you worried about?

589
00:21:00,380 --> 00:21:01,840
SENATOR:
I have telephone numbers

590
00:21:01,880 --> 00:21:04,410
and information of high-profile

591
00:21:04,450 --> 00:21:07,380
colleagues
and friends.

592
00:21:07,420 --> 00:21:10,080
I have photos of my husband
and my children on this phone.

593
00:21:10,120 --> 00:21:12,350
Clearly, there's something else
on that phone

594
00:21:12,390 --> 00:21:13,590
you don't want getting out.

595
00:21:13,620 --> 00:21:14,690
You don't understand.

596
00:21:14,720 --> 00:21:16,720
It can't get out.

597
00:21:16,760 --> 00:21:19,460
What I have on this phone
is very personal.

598
00:21:19,500 --> 00:21:21,070
It could ruin my career.

599
00:21:21,100 --> 00:21:24,900
Senator, he's already got
what's on your phone.

600
00:21:24,930 --> 00:21:25,900
So, what?

601
00:21:25,930 --> 00:21:28,340
What, I cross my fingers
and hope for the best?

602
00:21:28,370 --> 00:21:29,800
We are doing everything we can

603
00:21:29,840 --> 00:21:32,540
to identify
and arrest the target.

604
00:21:32,580 --> 00:21:34,490
You just don't get it.

605
00:21:34,510 --> 00:21:37,410
People I care about
will be hurt.

606
00:21:47,460 --> 00:21:49,820
I found something--
take a look at this.

607
00:21:51,430 --> 00:21:54,400
Rachel Carrington helps this
sick woman to the bathroom.

608
00:21:54,430 --> 00:21:56,400
And that's when
our juice jackers swoop in.

609
00:21:56,430 --> 00:21:58,900
The sick woman was a
distraction to get Rachel away

610
00:21:58,930 --> 00:22:00,800
from the charging bar.
Exactly.

611
00:22:00,840 --> 00:22:02,500
Our juice jackers
have about a minute

612
00:22:02,540 --> 00:22:06,510
to install their black box
before our sick lady returns.

613
00:22:06,540 --> 00:22:08,140
Miraculously,

614
00:22:08,180 --> 00:22:10,510
she doesn't look
so sick anymore.

615
00:22:12,850 --> 00:22:14,420
Wait, stop.

616
00:22:14,450 --> 00:22:15,550
Rewind that.

617
00:22:17,020 --> 00:22:19,150
Do you have a camera angle from
the direction they're heading?

618
00:22:19,190 --> 00:22:21,490
No, there's
a blind spot

619
00:22:21,520 --> 00:22:23,430
between gates 213
and 214.

620
00:22:23,460 --> 00:22:25,030
That's where the
bathrooms are, isn't it?

621
00:22:25,060 --> 00:22:26,090
Yeah.

622
00:22:26,130 --> 00:22:28,030
And where the airport police
reported finding blood.

623
00:22:29,900 --> 00:22:32,000
So these three people
were working together.

624
00:22:32,030 --> 00:22:34,070
The sick woman killed
Rachel Carrington.

625
00:22:34,100 --> 00:22:37,540
Yeah, but the problem is--
how do we identify them?

626
00:22:37,570 --> 00:22:38,370
Look at that.

627
00:22:38,410 --> 00:22:39,840
This footage,
it's way too grainy.

628
00:22:39,880 --> 00:22:41,050
That's a dead end.

629
00:22:41,080 --> 00:22:42,710
Well, maybe not.

630
00:22:42,750 --> 00:22:44,190
The black box
that they installed

631
00:22:44,210 --> 00:22:46,410
had to get
through security, right?

632
00:22:52,890 --> 00:22:54,590
Take a snapshot of that duffel.

633
00:23:00,600 --> 00:23:02,430
RYAN: To get that juice-jacking
device in the terminal,

634
00:23:02,470 --> 00:23:04,110
somebody had to get it
through security.

635
00:23:04,130 --> 00:23:06,470
Most people don't know
that TSA keeps

636
00:23:06,500 --> 00:23:08,000
all X ray photos
for a week.

637
00:23:08,040 --> 00:23:10,000
We can run our
duffel's snapshot

638
00:23:10,040 --> 00:23:11,210
against all the images
in the TSA archives.

639
00:23:11,240 --> 00:23:13,540
And based on the size, shape
and material of the device,

640
00:23:13,580 --> 00:23:15,640
we should be able to figure out
when this came through.

641
00:23:15,680 --> 00:23:17,450
RYAN: Check all the bags
that went through security

642
00:23:17,480 --> 00:23:20,650
two hours before the jackers
were spotted on surveillance.

643
00:23:24,690 --> 00:23:25,990
KRUMITZ:
Okay, we got it.

644
00:23:26,020 --> 00:23:27,660
MUNDO:
All right, hold on.

645
00:23:27,690 --> 00:23:30,460
Even if we can get a visual
on who came in with it,

646
00:23:30,490 --> 00:23:32,230
chances are pretty good
they used a fake I.D.

647
00:23:32,260 --> 00:23:34,560
RYAN: Well, that doesn't mean
we can't find them.

648
00:23:34,600 --> 00:23:36,560
You can learn a lot
about somebody

649
00:23:36,600 --> 00:23:38,570
by examining the contents
of their bag.

650
00:23:38,600 --> 00:23:40,570
Krumitz, remove everything
that's blue.

651
00:23:40,600 --> 00:23:43,470
It's metal like
our juice-jacking device.

652
00:23:43,510 --> 00:23:46,470
Now, separate the
materials by colors.

653
00:23:46,510 --> 00:23:49,480
We're looking for anything
plastic or biological.

654
00:23:49,510 --> 00:23:51,710
Take away the biomaterials
in orange.

655
00:23:51,750 --> 00:23:53,950
Focus on the
plastics in green.

656
00:23:57,720 --> 00:23:58,720
Right there.

657
00:23:58,750 --> 00:24:00,620
Do you see
that wizard hat?

658
00:24:00,660 --> 00:24:02,160
That's the Warlocks.

659
00:24:02,190 --> 00:24:03,530
MUNDO:
The hacker collective.

660
00:24:03,560 --> 00:24:04,290
KRUMITZ:
Yeah.

661
00:24:04,330 --> 00:24:06,090
Yeah, their symbol's
a wizard hat.

662
00:24:06,130 --> 00:24:07,390
That's their badge.

663
00:24:07,430 --> 00:24:09,900
It's like an all-access pass for
proving their gang affiliation.

664
00:24:09,930 --> 00:24:12,170
That's Lomis' crew,
our juice jackers.

665
00:24:12,200 --> 00:24:14,800
Krumitz, search all bags before
and after this image

666
00:24:14,840 --> 00:24:16,170
for the same shape.

667
00:24:17,640 --> 00:24:19,640
There. There's
two more badges.

668
00:24:19,680 --> 00:24:21,120
KRUMITZ: That proves
that the two juice jackers

669
00:24:21,140 --> 00:24:22,810
and the sick woman
are all involved.

670
00:24:22,850 --> 00:24:24,820
All right, that's great,
but how do we find them?

671
00:24:24,850 --> 00:24:27,180
Hacker collectives hide
themselves all around the world.
(phone rings)

672
00:24:27,220 --> 00:24:29,190
I mean, they could be anywhere.

673
00:24:29,220 --> 00:24:31,120
My boy Nelson
coming through.

674
00:24:31,150 --> 00:24:33,590
He just came up with a traceable
hit on the credit cards.

675
00:24:33,620 --> 00:24:35,560
All right, looks like most
of the purchases were made

676
00:24:35,590 --> 00:24:36,790
at brick and
mortar spots,

677
00:24:36,830 --> 00:24:38,570
like high-end department stores
and electronic retailers.

678
00:24:38,590 --> 00:24:42,660
You got computers,
laptops, handbags.

679
00:24:42,700 --> 00:24:44,670
Goods that can easily
be sold for quick cash.

680
00:24:44,700 --> 00:24:47,670
Yeah, except that Nelson just
found an odd online purchase.

681
00:24:47,700 --> 00:24:48,800
RYAN: No, that's
a server blade.

682
00:24:48,840 --> 00:24:50,570
That is not something
you can buy

683
00:24:50,610 --> 00:24:51,870
at your local
electronics store.

684
00:24:51,910 --> 00:24:54,240
But I'm willing
to bet that's something

685
00:24:54,280 --> 00:24:56,680
a hacker collective
is gonna want.

686
00:24:56,710 --> 00:24:58,250
MUNDO: Big online purchase
with a stolen credit card?

687
00:24:58,280 --> 00:24:59,280
Easily traceable?

688
00:24:59,310 --> 00:25:02,280
That's a little sloppy
for Lomis, don't you think?

689
00:25:02,320 --> 00:25:03,920
No, but we stopped
his payday.

690
00:25:03,950 --> 00:25:05,950
He's scrambling, I mean,
that's when you make mistakes.

691
00:25:05,990 --> 00:25:07,890
His mistake is our gain.

692
00:25:07,920 --> 00:25:10,890
The clock is ticking--
we've got 14 hours left.

693
00:25:10,930 --> 00:25:13,730
That purchase is gonna be linked
to an address-- find it.

694
00:25:18,630 --> 00:25:20,130
FBI!

695
00:25:21,140 --> 00:25:22,340
FBI!

696
00:25:22,370 --> 00:25:23,610
Hands in the air!
Hands in the air!

697
00:25:23,640 --> 00:25:24,610
(indistinct shouting)

698
00:25:24,640 --> 00:25:25,970
On the ground now!

699
00:25:26,010 --> 00:25:28,180
Get down! On the ground now!

700
00:25:28,210 --> 00:25:30,140
Get on the floor!

701
00:25:30,180 --> 00:25:31,610
Heads down!

702
00:25:31,650 --> 00:25:32,810
(indistinct shouting)

703
00:25:33,650 --> 00:25:35,580
He went out the back door.

704
00:25:40,190 --> 00:25:42,620
FBI, freeze!

705
00:25:46,630 --> 00:25:47,600
Crap!

706
00:25:55,670 --> 00:25:57,940
(both grunting)

707
00:26:12,790 --> 00:26:14,260
I really thought
Lomis would be here.

708
00:26:24,370 --> 00:26:26,900
We found traces of blood
underneath your fingernail.

709
00:26:28,400 --> 00:26:30,070
DNA matched
Rachel Carrington.

710
00:26:32,780 --> 00:26:33,750
You killed her.

711
00:26:33,780 --> 00:26:34,740
No.

712
00:26:34,780 --> 00:26:37,110
No, it was
an accident.

713
00:26:37,150 --> 00:26:38,790
I was just supposed
 to distract her.

714
00:26:38,810 --> 00:26:40,850
CARRINGTON:
Glad you're feeling better.

715
00:26:40,880 --> 00:26:42,720
I really have to be
heading back, though.

716
00:26:42,750 --> 00:26:43,750
Uh, wait.

717
00:26:43,790 --> 00:26:45,690
Wh...
What are you...?

718
00:26:46,790 --> 00:26:48,420
MUNDO:
 Once you realized she was dead,

719
00:26:48,460 --> 00:26:50,860
you went back to your partners.

720
00:26:50,890 --> 00:26:52,960
She was still breathing
when we left her.

721
00:26:57,800 --> 00:27:00,770
I thought for sure someone
 would find her immediately.

722
00:27:00,800 --> 00:27:02,700
You made it look
like she was sleeping

723
00:27:02,740 --> 00:27:05,910
so you could buy enough time
to escape the crime scene.

724
00:27:05,940 --> 00:27:07,810
No, I wanted to tell someone.

725
00:27:07,840 --> 00:27:09,180
FIRST MAN:
But they wouldn't let me.

726
00:27:09,210 --> 00:27:11,710
They were scared of
what he would do to us.

727
00:27:11,750 --> 00:27:13,180
Of what who
would do to you?

728
00:27:13,220 --> 00:27:15,190
Lomis? You said
you'd never met him?

729
00:27:15,220 --> 00:27:16,850
SECOND MAN:
Online, man.

730
00:27:16,890 --> 00:27:20,200
Where reputations matter.

731
00:27:20,220 --> 00:27:22,190
He could destroy us.

732
00:27:22,220 --> 00:27:24,860
He could ruin
our cred.

733
00:27:24,890 --> 00:27:26,190
You know
what I can do?

734
00:27:26,230 --> 00:27:29,130
Put you in jail
for the next 25 years.

735
00:27:29,160 --> 00:27:31,130
Who's collecting
the phone-ransom money?

736
00:27:31,170 --> 00:27:33,870
I didn't know about the phones
being ransomed, I swear.

737
00:27:33,900 --> 00:27:35,700
He hired us

738
00:27:35,740 --> 00:27:37,870
to install the box
 and clone the cards

739
00:27:37,910 --> 00:27:38,710
and buy the goods, that's it.

740
00:27:38,740 --> 00:27:40,370
Oh, come on,
there was a server blade.

741
00:27:40,410 --> 00:27:41,810
What do you think
that was for?

742
00:27:41,840 --> 00:27:43,750
That server blade?

743
00:27:43,780 --> 00:27:44,850
We didn't buy it.

744
00:27:44,880 --> 00:27:45,850
Lomis did.

745
00:27:45,880 --> 00:27:47,180
He sent it to us.

746
00:27:47,220 --> 00:27:48,730
He set us up to take the fall.

747
00:27:48,750 --> 00:27:50,220
You expect me to believe that?

748
00:27:50,250 --> 00:27:52,750
He didn't even show up...

749
00:27:52,790 --> 00:27:53,820
To collect his share
of the take.

750
00:27:53,860 --> 00:27:55,990
Who passes up
on that much money?

751
00:28:04,100 --> 00:28:05,930
I don't believe them.

752
00:28:05,970 --> 00:28:07,770
They know where Lomis is,
they have to.

753
00:28:07,800 --> 00:28:08,940
No, they don't,
Krumitz.

754
00:28:08,970 --> 00:28:10,340
They've never met him.

755
00:28:10,370 --> 00:28:12,370
Which is why your white
whale never gets caught.

756
00:28:18,350 --> 00:28:20,350
(laughs)

757
00:28:36,030 --> 00:28:37,030
What is that?

758
00:28:37,070 --> 00:28:38,810
Lomis is taunting me.

759
00:28:38,830 --> 00:28:40,270
He knew I'd find the
juice-jacking device,

760
00:28:40,300 --> 00:28:43,440
and he overrode the data with
"Gotcha!" a bajillion times.

761
00:28:43,470 --> 00:28:44,510
All right, well,
if he overwrote the data,

762
00:28:44,540 --> 00:28:46,940
there's no way to retrieve
what was there before.

763
00:28:46,980 --> 00:28:47,920
Hence "Gotcha!"

764
00:28:47,940 --> 00:28:49,940
Those the shredded phones?

765
00:28:49,980 --> 00:28:51,880
Get on the floor!

766
00:28:51,910 --> 00:28:53,780
KRUMITZ:
 Yep.

767
00:28:53,820 --> 00:28:56,020
I figured they tried
to destroy 'em because
there's something on them

768
00:28:56,050 --> 00:28:57,790
they don't want me to find.

769
00:28:57,820 --> 00:29:01,190
I'm recovering all of
the salvageable pieces.

770
00:29:07,830 --> 00:29:08,500
Anything?

771
00:29:08,530 --> 00:29:10,360
No. Not yet.

772
00:29:11,230 --> 00:29:13,400
Okay. I got your time stamp.

773
00:29:13,440 --> 00:29:14,910
Come on.

774
00:29:14,940 --> 00:29:17,040
Come on, come on,
come on, come on.

775
00:29:17,070 --> 00:29:18,440
Yes!

776
00:29:18,470 --> 00:29:20,270
Did you just get
his serial number?
Yep.

777
00:29:23,950 --> 00:29:26,050
I got you now, Lomis.

778
00:29:26,080 --> 00:29:27,510
I'm gonna track
this serial number

779
00:29:27,550 --> 00:29:29,520
right down
to your evil lair.

780
00:29:29,550 --> 00:29:33,390
(trilling, beeping)

781
00:29:36,320 --> 00:29:42,030
You got to be kidding me.
It's untraceable.

782
00:29:42,060 --> 00:29:44,900
Damn it!

783
00:29:47,640 --> 00:29:50,250
When was the last time
you slept?

784
00:29:50,270 --> 00:29:53,410
Listen, man, I know
it's hard, all right?

785
00:29:53,440 --> 00:29:56,480
I do. Believe me. All right,
I ever tell you about the...

786
00:29:56,510 --> 00:29:59,950
the sleeper cell I
tracked in Kandahar?

787
00:29:59,980 --> 00:30:03,280
117 degrees.

788
00:30:03,320 --> 00:30:04,490
Dry heat.

789
00:30:04,520 --> 00:30:06,950
It was the kind that-that chaps
the inside of your mouth.

790
00:30:06,990 --> 00:30:08,620
All right,
between the four of us,

791
00:30:08,660 --> 00:30:11,160
we had half a canteen
of water left.

792
00:30:11,190 --> 00:30:15,100
We had been there for three days
because I was obsessed.

793
00:30:15,130 --> 00:30:19,270
I knew if I stayed on 'em,
if I persevered,

794
00:30:19,300 --> 00:30:21,240
I'd find 'em.

795
00:30:21,270 --> 00:30:24,070
I was wrong.

796
00:30:24,110 --> 00:30:25,470
So you just quit?

797
00:30:25,510 --> 00:30:27,440
You gave up?

798
00:30:27,480 --> 00:30:28,990
No.

799
00:30:29,010 --> 00:30:31,050
There's a big difference
between quitting

800
00:30:31,080 --> 00:30:33,280
and just knowing
when it's not your day.

801
00:30:35,180 --> 00:30:36,480
We need you in CTOC.

802
00:30:37,650 --> 00:30:38,920
When you're ready.

803
00:30:42,160 --> 00:30:44,160
Did you catch them?

804
00:30:49,060 --> 00:30:50,500
What do you think?

805
00:30:50,530 --> 00:30:52,600
I had to wait
a month, but...

806
00:30:52,630 --> 00:30:55,200
believe me, it was worth it.

807
00:31:02,480 --> 00:31:04,950
SIFTER:
Okay, we only have two hours

808
00:31:04,980 --> 00:31:07,410
before our victims' private
data is released on the Web.

809
00:31:07,450 --> 00:31:09,580
How close are we
to... anything?

810
00:31:09,620 --> 00:31:11,150
The code's sophisticated.

811
00:31:11,190 --> 00:31:12,690
We're getting there,
but it's gonna take time.

812
00:31:12,720 --> 00:31:16,260
Against orders, some people
paid the ransom already.

813
00:31:16,290 --> 00:31:17,960
Hey, guys, we got a problem.

814
00:31:17,990 --> 00:31:18,830
What is it?

815
00:31:18,860 --> 00:31:20,290
Lomis isn't waiting
for the deadline.

816
00:31:20,330 --> 00:31:23,700
He's releasing
people's information right now.

817
00:31:23,730 --> 00:31:25,970
And he started with
the most powerful person first.

818
00:31:26,000 --> 00:31:28,540
I thought
the senator already paid.

819
00:31:28,570 --> 00:31:30,300
Yeah, I thought
she did, too.

820
00:31:30,340 --> 00:31:33,010
Well, this will be the headline
on every national newscast.

821
00:31:33,040 --> 00:31:34,640
Got another one.

822
00:31:35,680 --> 00:31:37,340
RYAN:
Chelsea's photos were released

823
00:31:37,380 --> 00:31:38,710
to a revenge porn site.

824
00:31:38,750 --> 00:31:40,610
Lomis isn't
playing by the rules,

825
00:31:40,650 --> 00:31:42,480
which makes him very dangerous.

826
00:31:42,520 --> 00:31:44,450
KRUMITZ:
Guys! Guys!

827
00:31:44,490 --> 00:31:46,320
I did it.

828
00:31:46,350 --> 00:31:48,190
I finally found Lomis.
I got an I.D.

829
00:31:48,220 --> 00:31:49,620
How'd you find him?

830
00:31:49,660 --> 00:31:52,160
Just like you said--
go back to the evidence.

831
00:31:52,190 --> 00:31:54,030
So I took another look
at the juice-jacking box.

832
00:31:54,060 --> 00:31:56,730
Lomis made it impossible to
recover any data off that thing.

833
00:31:56,760 --> 00:31:58,130
You're right.

834
00:31:58,170 --> 00:32:00,300
Except for one thing: time.

835
00:32:00,340 --> 00:32:03,280
I know what time Lomis
overwrote the data.

836
00:32:03,310 --> 00:32:06,080
It was four hours before
we even found the box
at the airport.

837
00:32:06,110 --> 00:32:08,640
That's around the time
the first flights
were taking off.

838
00:32:08,680 --> 00:32:11,610
He had to plug directly
into the charging station

839
00:32:11,650 --> 00:32:13,010
to steal everyone's data.

840
00:32:13,050 --> 00:32:14,450
Lomis was there, in person.

841
00:32:14,480 --> 00:32:16,550
Yeah-- I pulled the
airport security footage

842
00:32:16,580 --> 00:32:18,990
four hours before
we arrived.

843
00:32:19,020 --> 00:32:20,150
(computer beeping)

844
00:32:20,190 --> 00:32:22,020
Say hello to Lomis.

845
00:32:36,440 --> 00:32:38,270
Okay, your point?

846
00:32:38,310 --> 00:32:39,510
I mean,
this doesn't prove anything.

847
00:32:39,540 --> 00:32:41,510
Yeah, well, it's about
to prove everything.

848
00:32:41,540 --> 00:32:43,310
I don't even know
what you're showing me.

849
00:32:43,350 --> 00:32:45,490
KRUMITZ:
Mr. Hart, we know the truth.

850
00:32:45,510 --> 00:32:48,550
HART: I'm telling you,
you've got it wrong.

851
00:32:48,580 --> 00:32:50,220
RYAN:
We have evidence...
No!

852
00:32:51,390 --> 00:32:53,120
I mean, Willa is
a straight-A student.

853
00:32:53,160 --> 00:32:55,070
She plays soccer,
dance lessons, violin...

854
00:32:55,090 --> 00:32:56,190
KRUMITZ:
Yeah...

855
00:32:56,220 --> 00:32:58,430
and she also took first place
in the Miami-Dade County

856
00:32:58,460 --> 00:32:59,790
high school chess
tournament.

857
00:32:59,830 --> 00:33:01,800
We get it--
she's a genius

858
00:33:01,830 --> 00:33:03,530
and you're a proud father.

859
00:33:03,570 --> 00:33:05,780
This is insane.

860
00:33:05,800 --> 00:33:08,540
All right, Willa's
not a hacker.

861
00:33:08,570 --> 00:33:09,770
And she's a good kid.

862
00:33:09,800 --> 00:33:11,470
Maybe she is.

863
00:33:11,510 --> 00:33:13,040
But maybe she's not.

864
00:33:13,080 --> 00:33:15,320
I have a warrant
for her tablet.

865
00:33:15,340 --> 00:33:16,540
If it's clean,
she's innocent.

866
00:33:16,580 --> 00:33:19,810
And exactly the daughter
you believe her to be.

867
00:33:19,850 --> 00:33:21,480
Why would
she do this?

868
00:33:21,520 --> 00:33:23,180
(door opens)

869
00:33:24,350 --> 00:33:27,150
Dad, whose car is that
in the driveway?

870
00:33:27,190 --> 00:33:29,490
KRUMITZ: Belongs to the
Federal Bureau of Investigation.

871
00:33:31,360 --> 00:33:33,260
Hello, Lomis.

872
00:33:33,300 --> 00:33:35,470
It's nice to meet you.

873
00:33:36,430 --> 00:33:38,530
I've been waiting
a long time for this.

874
00:33:42,200 --> 00:33:43,600
Gotcha.

875
00:33:47,580 --> 00:33:53,190
Everything about you
is unexpected.

876
00:33:53,220 --> 00:33:55,130
We bought your disguise.

877
00:33:55,150 --> 00:33:56,520
We actually
thought you were

878
00:33:56,550 --> 00:33:58,590
a 35-year-old man
from Eastern Europe.

879
00:33:58,620 --> 00:34:01,220
Very clever.
You went through
all the trouble

880
00:34:01,260 --> 00:34:02,520
of stealing
credit card information

881
00:34:02,560 --> 00:34:04,090
and never collected your take.

882
00:34:04,130 --> 00:34:06,630
You were the mastermind
 behind the whole plan.

883
00:34:06,660 --> 00:34:10,530
Stole all those credit card
 numbers but never met up

884
00:34:10,570 --> 00:34:12,540
with your accomplices
 to get paid.

885
00:34:12,570 --> 00:34:13,830
RYAN:
 But, then again, you couldn't.

886
00:34:13,870 --> 00:34:15,640
A 16-year-old girl
couldn't show up

887
00:34:15,670 --> 00:34:18,270
at a hacker's house to collect.

888
00:34:18,310 --> 00:34:19,470
You would've blown
your cover.

889
00:34:19,510 --> 00:34:20,870
So then you ransomed
all the phones,

890
00:34:20,910 --> 00:34:22,580
and we thought you were
gonna get paid that way.

891
00:34:22,610 --> 00:34:25,850
But then you began releasing
the ransomed data anyway.

892
00:34:25,880 --> 00:34:28,820
Senator Finnis
tried to pay you.

893
00:34:28,850 --> 00:34:30,450
But, to our surprise,
you denied payment.

894
00:34:30,490 --> 00:34:32,530
Because it wasn't
about the money.

895
00:34:32,550 --> 00:34:34,220
I have to know.

896
00:34:34,260 --> 00:34:35,590
What was this about? Why

897
00:34:35,620 --> 00:34:38,130
did you do it?

898
00:34:38,160 --> 00:34:39,530
Did you even

899
00:34:39,560 --> 00:34:42,260
think about
the consequences?

900
00:34:42,300 --> 00:34:44,600
Senator Finnis,
Michael Young,

901
00:34:44,630 --> 00:34:46,300
Victoria Fields,

902
00:34:46,330 --> 00:34:49,140
Simone Taylor-- you ruined
their lives today.

903
00:34:51,640 --> 00:34:52,870
Look, this
isn't a joke,

904
00:34:52,910 --> 00:34:54,710
Willa. Tell us why.

905
00:34:54,740 --> 00:34:56,410
Why did you do it?

906
00:34:56,440 --> 00:34:58,650
Because I wanted to.

907
00:35:00,650 --> 00:35:03,480
I was bored.
I did it because I could.

908
00:35:13,560 --> 00:35:15,530
VICKNER:
You saw this, right?

909
00:35:15,560 --> 00:35:17,300
SIFTER:
Oh, yeah.

910
00:35:17,330 --> 00:35:18,370
It's a shame.

911
00:35:18,400 --> 00:35:20,530
The senator's husband
and children learning her

912
00:35:20,570 --> 00:35:23,370
sexual preference from the
front page of a paper, it's...

913
00:35:23,410 --> 00:35:25,620
Yeah, well,
privacy is a myth.

914
00:35:25,640 --> 00:35:27,570
Personal info is
the new commodity.

915
00:35:28,710 --> 00:35:30,540
I, uh... I understand
three other people

916
00:35:30,580 --> 00:35:32,180
had their information released.

917
00:35:32,210 --> 00:35:35,280
Well, Lomis had access
to 300 phones

918
00:35:35,320 --> 00:35:36,720
and whatever was on them.

919
00:35:36,750 --> 00:35:37,950
We got her.

920
00:35:37,990 --> 00:35:40,900
I mean, we confiscated
all of her devices.

921
00:35:40,920 --> 00:35:42,620
She had plenty of time
to make copies

922
00:35:42,660 --> 00:35:45,690
and distribute them to anyone.

923
00:35:45,730 --> 00:35:47,490
And what they do with it...

924
00:35:47,530 --> 00:35:48,800
only time will tell.

925
00:35:50,330 --> 00:35:52,570
What's this?

926
00:35:52,600 --> 00:35:54,500
That's me keeping
you in the loop.

927
00:35:54,540 --> 00:35:58,470
I-I still can't believe
that she's just a teenager.

928
00:35:58,510 --> 00:36:01,680
So, Colin...
Yeah.

929
00:36:01,710 --> 00:36:03,680
Can I be honest
with you?

930
00:36:03,710 --> 00:36:06,450
I was a little pissed off
I didn't get that promotion.

931
00:36:06,480 --> 00:36:07,610
I was.

932
00:36:07,650 --> 00:36:10,350
I just felt I was

933
00:36:10,390 --> 00:36:12,660
the best man
for the job.

934
00:36:12,690 --> 00:36:14,520
So did I.

935
00:36:14,560 --> 00:36:17,260
I mean-- think that I was
the best man for the job.

936
00:36:17,290 --> 00:36:19,290
Look, I'll-I'll
admit it--

937
00:36:19,330 --> 00:36:21,560
there's not a whole lot
that I know

938
00:36:21,600 --> 00:36:24,900
about what you
and your people do.

939
00:36:24,930 --> 00:36:27,700
That's not
an enviable position.
You're not gonna

940
00:36:27,740 --> 00:36:28,980
try and hug me now, are you?

941
00:36:29,000 --> 00:36:31,740
No. In fact, my job
practically guarantees

942
00:36:31,770 --> 00:36:33,310
I am gonna be a constant

943
00:36:33,340 --> 00:36:35,610
pain in your ass.

944
00:36:35,640 --> 00:36:38,650
But listen, I'm the least
of your worries.

945
00:36:42,720 --> 00:36:44,450
Tomorrow's criminal.

946
00:36:44,490 --> 00:36:47,720
That is who you're
gonna lose sleep over.

947
00:36:47,760 --> 00:36:49,770
Good night.

948
00:36:50,990 --> 00:36:52,990
Good night.

949
00:37:01,800 --> 00:37:03,300
What's that?

950
00:37:04,770 --> 00:37:06,040
Postcard.

951
00:37:06,070 --> 00:37:07,740
From Lomis?

952
00:37:09,040 --> 00:37:11,650
Sent the moment the prosecutor
released her from custody.

953
00:37:11,680 --> 00:37:14,780
It's not fair.

954
00:37:14,820 --> 00:37:16,780
She gets to walk
because

955
00:37:16,820 --> 00:37:19,520
she happens to be 16,
but she is a criminal.

956
00:37:19,550 --> 00:37:21,690
But she's a cyber criminal.

957
00:37:21,720 --> 00:37:23,720
And we both know that
sentencing guidelines

958
00:37:23,760 --> 00:37:25,730
make it very difficult
to prosecute

959
00:37:25,760 --> 00:37:27,630
if they're under 21.

960
00:37:27,660 --> 00:37:29,730
It's like we're
encouraging kids

961
00:37:29,760 --> 00:37:31,730
to become black hats.

962
00:37:31,770 --> 00:37:33,770
Well, maybe one day
that law will change.

963
00:37:33,800 --> 00:37:34,740
But today...

964
00:37:34,770 --> 00:37:36,770
you need to be very grateful
that we couldn't

965
00:37:36,800 --> 00:37:38,470
prosecute.
Now, did you

966
00:37:38,510 --> 00:37:40,540
intend to break the law
or was that accidental?

967
00:37:40,580 --> 00:37:41,720
'Cause I really want to believe

968
00:37:41,740 --> 00:37:44,580
you had no idea that what
you were doing was illegal.

969
00:37:46,380 --> 00:37:49,450
I know you paid off
 the ransomed phone via text.

970
00:37:53,720 --> 00:37:57,790
And with that payment you
 bundled a Remote Access Trojan.

971
00:37:57,830 --> 00:37:59,640
That's illegal.

972
00:38:03,870 --> 00:38:06,010
You took control
 of Lomis' desktop computer

973
00:38:06,030 --> 00:38:09,640
and you snapped a picture.

974
00:38:10,970 --> 00:38:12,940
KRUMITZ:
 Guys. Guys.

975
00:38:12,970 --> 00:38:15,010
I did it.

976
00:38:15,040 --> 00:38:17,410
I finally found Lomis.
I got an I.D.

977
00:38:17,450 --> 00:38:19,060
How'd you know?

978
00:38:19,080 --> 00:38:20,750
You told me.

979
00:38:20,780 --> 00:38:22,420
KRUMITZ:
 And she also took first place

980
00:38:22,450 --> 00:38:23,880
in the Miami-Dade County
high school chess

981
00:38:23,920 --> 00:38:26,720
tournament. We get it--
she's a genius

982
00:38:26,750 --> 00:38:28,020
and you're a proud father.

983
00:38:28,060 --> 00:38:30,130
You couldn't know
she was a chess champion

984
00:38:30,160 --> 00:38:31,690
unless you were
in her bedroom,

985
00:38:31,730 --> 00:38:33,860
and I knew
that you weren't. So I

986
00:38:33,900 --> 00:38:36,740
accessed your Bureau files
and I found that photo.

987
00:38:36,760 --> 00:38:39,030
Without my
authorization

988
00:38:39,070 --> 00:38:40,730
and a judge's
subpoena,

989
00:38:40,770 --> 00:38:42,870
you broke the law
when you took that photo.

990
00:38:42,900 --> 00:38:45,140
It was a digital search
without a warrant.

991
00:38:45,170 --> 00:38:47,970
I couldn't let Lomis win again.

992
00:38:48,010 --> 00:38:49,980
And I know
this sounds insane,

993
00:38:50,010 --> 00:38:53,610
but I...

994
00:38:53,650 --> 00:38:55,980
I needed to justify your
decision to hire me.

995
00:38:56,020 --> 00:38:58,520
Your belief in me.

996
00:38:58,550 --> 00:39:01,090
I started at the FBI
pushing a mail cart.

997
00:39:01,120 --> 00:39:04,490
And I would've been there
forever, but you found me.

998
00:39:04,530 --> 00:39:06,490
I hadn't been
in CTOC ten minutes

999
00:39:06,530 --> 00:39:08,500
before I realized
how dedicated you were.

1000
00:39:08,530 --> 00:39:09,800
And watching you

1001
00:39:09,830 --> 00:39:13,130
love your job

1002
00:39:13,170 --> 00:39:16,040
made me love my job.

1003
00:39:19,040 --> 00:39:21,610
And made me never
want to let you down.

1004
00:39:23,850 --> 00:39:25,820
I didn't know what else to do.

1005
00:39:27,780 --> 00:39:29,750
That is no excuse.

1006
00:39:29,780 --> 00:39:31,890
What if Lomis
was a 35-year-old man?

1007
00:39:31,920 --> 00:39:33,120
I know. He would have walked.

1008
00:39:33,150 --> 00:39:36,120
And I would've been
forced to turn you in.

1009
00:39:38,830 --> 00:39:40,560
Today's your lucky day.

1010
00:39:40,600 --> 00:39:42,770
Your mistake is not
sending you to prison.

1011
00:39:42,800 --> 00:39:44,800
It's dying here with me.

1012
00:39:46,230 --> 00:39:48,900
But I want you
to think about something.

1013
00:39:48,940 --> 00:39:51,200
Does victory
really taste so sweet

1014
00:39:51,240 --> 00:39:53,540
when you haven't
earned it honestly?

1015
00:40:26,710 --> 00:40:28,980
Captioning sponsored by
 CBS

1016
00:40:29,010 --> 00:40:32,110
Captioned by
 Media Access Group at WGBH
access.wgbh.org