https://arstechnica.com/tech-policy/2023/03/us-investigates-tiktok-owner-bytedances-surveillance-of-journalists/ Skip to main content * Biz & IT * Tech * Science * Policy * Cars * Gaming & Culture * Store * Forums Subscribe [ ] Close Navigate * Store * Subscribe * Videos * Features * Reviews * RSS Feeds * Mobile Site * About Ars * Staff Directory * Contact Us * Advertise with Ars * Reprints Filter by topic * Biz & IT * Tech * Science * Policy * Cars * Gaming & Culture * Store * Forums Settings Front page layout Grid List Site theme light dark Sign in ByteDance surveillance probe -- US investigates TikTok owner ByteDance's surveillance of journalists ByteDance said it condemned actions of its former employees. Jon Brodkin - Mar 17, 2023 7:48 pm UTC A large TikTok logo displayed at a game conference. Enlarge Getty Images | Chesnot reader comments 23 with Share this story * Share on Facebook * Share on Twitter * Share on Reddit New reports say the US Justice Department is investigating TikTok-owner ByteDance over recent revelations that employees tracked journalists in an attempt to find out who leaked company data to the press. The Justice Department and US Attorney in the Eastern District of Virginia "subpoenaed information from ByteDance regarding efforts by its employees to access US journalists' location information or other private user data using the TikTok app," Forbes reported yesterday. "According to two sources, the FBI has been conducting interviews related to the surveillance." The investigation was also confirmed today in New York Times and Wall Street Journal articles citing anonymous sources. The investigation reportedly began in December. ByteDance is based in China, and TikTok is facing the possibility of being banned in the US if it doesn't sever ties with its China-based owners. "We have strongly condemned the actions of the individuals found to have been involved, and they are no longer employed at ByteDance," the company told Forbes this week. "Our internal investigation is still ongoing, and we will cooperate with any official investigations when brought to us." Surveillance targeted US and UK journalists ByteDance's internal investigation, which was triggered by news reports detailing the surveillance, "found that employees tracked multiple journalists covering the company, improperly gaining access to their IP addresses and user data in an attempt to identify whether they had been in the same locales as ByteDance employees," Forbes wrote in December, adding: The investigation, internally known as Project Raven, began this summer after BuzzFeed News published a story revealing that China-based ByteDance employees had repeatedly accessed US user data, based on more than 80 hours of audio recordings of internal TikTok meetings. According to internal ByteDance documents reviewed by Forbes, Project Raven involved the company's Chief Security and Privacy Office, was known to TikTok's Head of Global Legal Compliance, and was approved by ByteDance employees in China. It tracked Emily Baker-White, Katharine Schwab and Richard Nieva, three Forbes journalists that formerly worked at BuzzFeed News. Advertisement The surveillance campaign "was designed to unearth the source of leaks inside the company following a drumbeat of stories exposing the company's ongoing links to China," Forbes wrote. The report said that ByteDance chief internal auditor Chris Lepitak was fired, while the China-based executive Lepitak reported to, Song Ye, resigned. A Financial Times reporter was also reportedly targeted by the company's surveillance. "Two members of staff in the US and two in China gained access to the IP addresses and other personal data of FT journalist Cristina Criddle, to work out if she was in the proximity of any ByteDance employees, the company said. However, the company failed to find any leaks," the FT wrote in December. Criddle wrote articles "revealing that dozens of staff had left TikTok's London office and that some had worked 12-hour days or had been demoted after taking time off," the FT wrote. TikTok has said it would restructure the Internal Audit and Risk Control department and that it removed all user data access and permissions for the department. We contacted ByteDance today and will update this article if the company provides any further comment. reader comments 23 with Share this story * Share on Facebook * Share on Twitter * Share on Reddit Jon Brodkin Jon is Ars Technica's senior IT reporter, covering the FCC and broadband, telecommunications, tech policy, and more. Email jon.brodkin@arstechnica.com // Twitter @JBrodkin Advertisement Channel Ars Technica - Previous story Next story - Related Stories Today on Ars * Store * Subscribe * About Us * RSS Feeds * View Mobile Site * Contact Us * Staff * Advertise with us * Reprints Newsletter Signup Join the Ars Orbital Transmission mailing list to get weekly updates delivered to your inbox. Sign me up - CNMN Collection WIRED Media Group (c) 2023 Conde Nast. All rights reserved. Use of and/or registration on any portion of this site constitutes acceptance of our User Agreement (updated 1/1/20) and Privacy Policy and Cookie Statement (updated 1/1 /20) and Ars Technica Addendum (effective 8/21/2018). Ars may earn compensation on sales from links on this site. Read our affiliate link policy. Your California Privacy Rights | Do Not Sell My Personal Information The material on this site may not be reproduced, distributed, transmitted, cached or otherwise used, except with the prior written permission of Conde Nast. Ad Choices