top | item 46963804

Google Fulfilled ICE Subpoena Demanding Student Journalist Credit Card Number

798 points| lehi | 19 days ago |theintercept.com

354 comments

order

Some comments were deferred for faster rendering.

legitster|19 days ago

So I don't think I actually have a problem with businesses handing over their customer data if there is a valid warrant or subpoena. That's the system working as intended.

The main crux of the problem here is that the DHS has been granted a wide berth by congress to issue administrative subpoenas - i.e. not reviewed by a real judge and not directed at criminals. In "good" times this made investigations run smoothly. But the reality now is that ICE is doing wide dragnets to make arrests without any judicial oversight and often hostile to habeas corpus.

(Also, my understanding is that when banking is involved, it may also fall under the Banking Secrecy Act and Know Your Customer Rules - a whole other privacy nightmare.)

I know we instinctively want to frame this as a privacy problem, but the real problem we need congress to act on is abolishing these "shadow" justice systems that agencies have been able to set up.

cyphar|19 days ago

> So I don't think I actually have a problem with businesses handing over their customer data if there is a valid warrant or subpoena. That's the system working as intended.

I disagree -- the third party doctrine that allows for governments to avoid serving/addressing warrants to the people whose data is actually being subpoenaed directly leads to things like the FISA warrant-rubber-stamp courts in the US. If the data stored on third-party servers on behalf of someone is not considered "papers and effects" of that person then it is entirely justified to subpoena every email stored on mail.google.com because it's just morally equivalent to a subpoena for "all of Foomatic's business records between 2020-2025".

It seems bonkers to me that things that are essentially implementation details (such as the way that MTAs work and the lack of crypto-obfuscation in email) should allow for a legal interpretation of the 4th amendment that effectively neuters it. Letters sent via snail-mail are handled by several third parties in a very analogous way to emails but (mostly due to historical reasons, such as the fact that letters existed during the drafting of the bill of rights) we do not apply the third-party doctrine to letters.

Of course, the US government has spent decades chipping away at the privacy of snail mail, so eventually we may end up in a world where snail mail and email are treated the same way (just not in a good way).

b00ty4breakfast|19 days ago

There will always be the opportunity for the foibles of humans to affect the procedures of the law. Trying to play "guess if the shadowy government agency is doing the right thing this week" is a losing game. They always take the proverbial mile, they are not ever going to be satisfied with the inch.

shevy-java|19 days ago

I don't see how what has been described here as "the system works as intended".

A free state should not be able to sniff after people for made up reasons.

singleshot_|19 days ago

> administrative subpoenas - i.e. not reviewed by a real judge

I have some bad news for you about magistrates.

46493168|19 days ago

> I know we instinctively want to frame this as a privacy problem, but the real problem

Both can be true at the same time.

antonvs|19 days ago

> I know we instinctively want to frame this as a privacy problem

It absolutely is a privacy problem. If that information was in your house, the 4th amendment would apply and they'd have to show up with a real judicial warrant, so you'd know what was happening.

Even if that's the "system working as intended" (intended by who exactly? I'm sure Peter Thiel loves it), anyone who cares at all about their own privacy should be using providers outside of US jurisdiction, because the US government does not, in practice, protect its citizens against unreasonable search and seizure as described in the Constitution.

fc417fc802|19 days ago

> In "good" times this made investigations run smoothly.

In good times they were still a blatant form of government abuse however the majority were completely unaffected and so didn't get riled up about it.

Similar to how a vigorous defense of freedom of speech is somehow consistently less popular among constituents of whichever party happens to be in power, as well as when applied to "objectionable" political views.

jauntywundrkind|19 days ago

It's kind of sort of glorious how Google and ICE are both setting their reputation on fire like this at the same time.

The cloud has such a long legacy of being the safe easy convenient place that you just don't have to think about. Nations have somewhat kept their fingers out of the cookie jar.

But now it's just wanton unchecked madness, with no real process, with no judicial review. Google giving in to ICE so quickly is absolutely existentially destructive to Google's business model, of the cloud being a default place you can put your stuff & rely on.

The cloud never deserved this reputation, and there was a certain freight train of inevitability that was coming crashing in from the future, that nations would make the cloud untenable & hostile a space. That felt inevitable. But this is so much harder worser faster dumber than could be expected.

DetroitThrow|19 days ago

>I know we instinctively want to frame this as a privacy problem

How is that not also a privacy problem?

crooked-v|19 days ago

"Administrative subpoenas" have always been bullshit that mostly rely on there being no penalty for companies that hand over user information to anyone with a badge and then justify it with a five-hundred-page TOS document.

godelski|19 days ago

  > I know we instinctively want to frame this as a privacy problem
I think it is, but I think this is a more fundamental level of privacy than most people are thinking of when they think of privacy

  > In "good" times this made investigations run smoothly.
Privacy people often talk about a concept called "Turnkey Tyranny". Really a reference to Jefferson's "elective despotism". The concept is that because any democracy can vote themselves into an autocracy (elective despotism) that the danger is the creation of that power in the first place. That you don't give Mr Rogers (or some other benevolent leader) any power that you wouldn't give to Hitler (or any horrifying leader).

Or as Jefferson put it

  The time to guard against corruption and tyranny, is before they shall have gotten hold of us. It is better to keep the wolf out of the fold, than to trust to drawing his teeth and talons after he shall have entered.

  > but the real problem we need congress to act
So no, that is not the "real problem". They should be involved but there are more fundamental issues at hand. Power creeps. Power creeps with good intention[0]. But there is a strong bias for power to increase and not decrease. And just like power creep in a movie or videogame it doesn't go away and can ruin everything.

Jefferson himself writes a lot about this tbh. It is why we have a system of checks and balances. Where the government treats itself adversarially. But this is also frustrating and makes things slow. So... power creeps.

So the real problem we need to solve is educating the populous. They need to understand these complexities and nuances. If they do not, they will unknowingly trade their freedom to quench their fears.

And this is why it is a privacy problem. Because we the people should always treat our government adversarially. Even in the "good times". Especially in the "good times". The founders of the US constitution wrote extensively about this, much like the privacy advocates write today. I think they would be more likely to take the position of "why collect this information in the first place?" than "under what conditions should this information be collected?". Both are important questions, but the latter should only come after the former. Both are about privacy. Privacy of what is created vs privacy of what is accessed.

[0] You mentioned banking, so a recent example might be the changes in when transactions of a certain level trigger a bank report. The number has changed over time, usually decreasing. It's with good intention, to catch people skirting the laws. You'll never get 100% of people so if this is the excuse it an be a race to reporting all transactions. Maybe you're fine with Mr Rogers having that data, but Hitler? You have to balance these things and it isn't so easy as the environment moves. You solve a major part of the problem with the first move but then the Overton window changes as you've now become accustomed to a different rate of that kind of fraud (and/or as adversaries have adapted to it). A cat and mouse game always presents a slippery slope and unless you consider these implicit conditions it'll be a race to the bottom.

atoav|19 days ago

So what about the Amsterdam government handing over the records to the new Nazi government in the past century? Under the back then new laws this was legal and lead to the genocide of countless people who happened to have the wrong belief listed in that data.

Please never make the mistake to confuse something being legal for something being fair or ethical.

behole|19 days ago

[deleted]

LtWorf|19 days ago

> In "good" times this made investigations run smoothly.

These times never existed.

sam345|19 days ago

I'm not an expert in fourth amendment but I do know that assuming a subpoena without judicial oversight violates the fourth amendment is not correct. All the fourth amendment guarantees is unreasonable search and seizure. In some circumstances a judicial subpoena may be necessary and others not. An administrative subpoena implies that there has been a legal procedure and the administrative agencies are not exactly run like the wild west.

h4kunamata|19 days ago

>"So I don't think I actually have a problem with businesses handing over their customer data if there is a valid warrant or subpoena. That's the system working as intended."

This person right here is the problem in our society. Things never and will never get isolated to "valid warrant".

Look around us, social after social media in order to "protect the kids", you must provide your personal information to them. Many people see nothing wrong with that and yet, service after service, business after business are being breached left and right.

Discord will mandate ID verification, just recently they have been breached.

Back to the article, if Google can do that for an immigrant, what make you think that Google won't do the same with your data as citizen whenever for whatever reason??

Don't agree with things you don't fully understand its consequences.

cvhc|19 days ago

Google discloses stats about government requests via FISA / National Security Letters: https://transparencyreport.google.com/user-data/us-national-...

I was in one of these published NSLs issued by FBI a few years ago. I was notified by Google after the nondisclosure period.

edm0nd|19 days ago

What did you get the NSL for?

Did it result in you being raided?

Were you ever indicted or convicted of anything?

garyfirestorm|19 days ago

care to explain how you got added to it? what happened then? did you fight it?

cebert|19 days ago

Please don’t forget to upload your driver’s license and ID for validations to keep the children safe!

tntxtnt|19 days ago

Very much this. We need to keep children safe from those predators that the government are trying their best to protect!!!

x1ph0z|19 days ago

What are some ways users can insulate themselves from something like this?

Anonbrit|19 days ago

Don't use products from large US tech companies?

Apple has a slightly better track record than Google of fighting this stuff, but ultimately if you're using a product from a US tech company then it's likely ICE can get their grubby little mitts on everything that company knows about you

digiown|19 days ago

I don't really understand the point in these cases specifically. If not Google, the government can always ask a bunch of other companies like utilities or stores about your details. It's a fool's errand to protect your payment info, ID, etc from the government, since it's issued or authorized by them in the first place.

With regard to more important info, treat Google and any other company's software as government-accessible. Don't put anything that could be even suspicious, since even if you can win in court, your time gets wasted by government employees getting paid for it. People keep forgetting it, but the cloud is just someone else's computer.

AzzyHN|19 days ago

As a rule: don't bother with trying to "opt out" of data collection. Reject the collection entirely either by forcefully blocking it (ublock Origin for instance) or straight up not using the service.

drnick1|19 days ago

Privacy crash course (non exhaustive):

- Do not use social media

- Install Linux on your PC/laptop, buy a phone compatible with GrapheneOS

- Self-host any cloud services you may need (file sharing etc.)

- Communicate over Signal or self-hosted Matrix/XMPP

- Use throwaway SIM cards and phone numbers where they make sense

- Unplug the cellular modem in your car (if applicable)

- Pay with cash or crypto

- Use fake identities for anything that isn't government related (paying taxes)

- Use Tor, VPNs, and ad blockers

solid_fuel|19 days ago

Vote for politicians who support checks and bounds, demand accountability from those in power, and participate in civics.

dismalaf|19 days ago

Be outside the US and/or don't use products from US companies?

Believe it or not, tech companies must comply with the authorities of countries they operate in. They're also not required to tell you, sometimes they're compelled to not tell you.

The idea that a tech company can outright oppose the state is pure fantasy... They still must operate within laws.

xyst|19 days ago

don't use centralized services, especially ones located in USA.

also self hosting (mail, contacts, storage, ...)

Filligree|19 days ago

Were they legally required to?

legitster|19 days ago

For a normal subpoena from a court, yes.

For an "administrative" subpoena from an agency, they take a risk in court.

Judicial review is deferred. If Google thinks the subpoena is egregious, they can go to court and argue. But in the meantime they can either carry it out or risk being held in contempt if they don't and lose in court.

jmyeet|19 days ago

According to the ACLU, they are not [1]. So Google voluntarily handed over user information. It requires a court order to enforce it and that requires a judge to sign off on it.

This is somewhat analogous to ICE's use of administrative warrants, which really have no legal standing. They certainly don't allow ICE to enter a private abode. You need a judicial warrant for that. That too requires a judge to sign off on it.

[1]: https://www.aclu.org/documents/know-your-rights-ice-administ...

dathinab|19 days ago

the only way to legally search a house, car or force companies to hand anything over is with a judge signing it off

the article isn't clear about it but it implies that this was not approved by a judge but DHS alone, this is also indicated but the fact that the supona contained a gag order but Google still informed the affected person that _some_ information was hanged over

now some level of cooperation with law enforcement even without a judge is normal to reduce friction and if you love in a proper state of law there is no problem Keith it.

Also companies are to some degree required to cooperate.

What makes this case so problematic is the amount of information shared without a judge order, that ICE tried to gag Google, that Google did delay compliance to give the affected person a chance to take legal action even through they could, and last but but least that this information seems to have been requested for retaliation against protestor which is a big no go for a state of law

saubeidl|19 days ago

[deleted]

JohnTHaller|19 days ago

Biggest thing to note is that this was a so-called "administrative" warrant, not a real judicial warrant. Google did this voluntary.

dmix|19 days ago

For more context see the Cornell article from last year

> The first email, sent on May 8 from Cornell International Services, stated that his immigration status had been terminated by the federal government. The second email, sent from Google on the same day, notified him that his personal email account had been subject to a subpoena by the U.S. Department of Homeland Security on March 31.

https://www.cornellsun.com/article/2025/11/immigration-autho...

Basically he was a British national with a student visa who was going to be deported for pro-palestian activism (under Trumps executive order mandating immigration authorities to do so), so he self-deported. Other's mention in the thread it's not clear if Google handed over any information.

diego_moita|19 days ago

Does anyone still remember when Western countries were scared of Huawei because the Chinese would use their hardware to spy on people?

Well, guess what? The U.S. also has their own Huawei. But, at least, they're "democratic" and follow "the rule of the law" (for whatever these words mean nowadays).

daveidol|19 days ago

Didn’t we all learn this with the Snowden files? Nothing new unfortunately

loeg|19 days ago

It's actually materially better that Google's regulator is the USG and not the CCP. These aren't the same thing.

dev_l1x_be|19 days ago

Centralised bank system, centralised internet, centralised power. What could possibly go wrong?

kmfrk|19 days ago

What I'm curious about is whether this payment information is from spending money or from YouTube's requirement of doing a symbolic credit card payment to authenticate that you're an adult - and other potential checks for YouTube partners.

Basically YouTube's form of age verification that takes place such as when they can't figure out whether to serve you mature videos or not.

tamimio|19 days ago

> on tech companies to resist similar subpoenas in the future from DHS without court intervention.

Haha nice one, these tech companies are willing to have a deal with devil to get those lucrative Gov contracts, and since it’s the the wild west now in the US, the only action users can do is abandoning all these tech companies and look for alternatives.

TacticalCoder|19 days ago

> executive orders targeting students who protested in support of Palestinians, Thomas-Johnson and his friend Momodou Taal went into hiding

Ah. They went into hiding. That explains why there are very few pro-Iran protests: for a second I thought there were double-standards when it came to protesting and that that was why we had non-stop pro-Gaza protests but hardly any protests to criticize the tens of thousands of victims the islamist iranian regime made in a few days.

> “As a journalist, what’s weird is that you’re so used to seeing things from the outside,” said Thomas-Johnson, whose work has appeared in outlets including Al Jazeera and The Guardian.

Where can I read the entirety of her work: that is, including her coverage of the tens of thousands of civilians executed by the islamist iranian regime?

For you're not telling she's not covering those because the islamist iranian regime happens to be pro-Hamas and anti-jews right? (btw I'm not jewish)

Right?

mlmonkey|19 days ago

> In the subpoena, ICE requests that Google not “disclose the existence of this summons for indefinite period of time.”

And they expect Google to pass it on to these people?

lasgawe|19 days ago

I remember someone saying that there is no privacy in large companies because they make money by selling or sharing users' personal data :/

xannabxlle|19 days ago

Glad to know Google is doing this. I am switching from brave search to Google from now on.

lingrush4|19 days ago

Google ought to rethink its policy of disclosing government subpoenas to users. Every time this happens, the media uses it to attack Google. They'd be better off leaving users in the dark about these legally required data disclosures. Even if most users don't go crying to the media when it happens, it's still not worth it.

jajuuka|19 days ago

Ultimately it's better for the public and users to be informed about this occurring though. If Google wanted to they could salvage it and explain their legal duties and how that applies to these situations. I don't think Google is worried though. They have multiple captive markets and have seen continued growth so it's obviously not affecting the bottom line.

It's a good contrast to Apple where any bit of bad news that makes headlines becomes priority one to fix. Which just creates a privileged class of users and makes the brand look fragile.

Hizonner|19 days ago

Ever occur to you that it's good for Google if there's some public visibility of what Google is being forced to do?

jsrozner|19 days ago

"full extent of the information...including any IP masking services"

This suggests that Google aggregates derived information based on how a user uses Google (i.e. VPN info). The fact that derived info was also potentially passed along is particularly upsetting to me.

Aside from the fact that I don't think companies should be able to collect user data at all (if you disagree, I think there's a good chance you're at least a little bit fascist), this amounts to Google providing free surveillance services to the government.

If you squint, it's minority-report-esque: eventually Google will tell the govt who it thinks is likely to commit crimes based on how they interact with its AIs. Almost certainly coming to a society near you soon.

partomniscient|18 days ago

The USA, land of the free^H^H^H^H surveilled.

AlexandrB|19 days ago

Why the hell did Google even have his bank account numbers? I wish there was more information on which Google service(s) this data was pulled from.

ceejayoz|19 days ago

You can setup ACH for a number of Google services; Cloud, Workspace, the Play Store.

jmclnx|19 days ago

I left google search for duckduckgo a few years ago due to all the marketing drivel returned. I guess there is yet another, better reason, to avoid google.

As for gmail, it joined my old yahoo mail as a dumping ground. If some site wants an email, they get my gmail address, which I never go to these days.

But how did google get this person's info ? Are they spying on their emails, or worse yet, are they scraping data for apps you installed on your android phone ?

starik36|19 days ago

What do you think is going to happen when DDG or Fastmail gets a FISA warrant? You think they will stand their ground and go to prison to protect your info?

History (like the PRISM project) says no.

Forgeties79|19 days ago

Just wish I could get off gcal. Too many friends/family on it

jimt1234|19 days ago

We, the America-hating liberals, have been warning about these "administrative subpoenas" for years, but we've always been blocked with "So, we're all gonna have wait for a judge to sign a warrant before we can stop the next 9/11?!"

EchoReflection|19 days ago

https://mediabiasfactcheck.com/the-intercept/

"These media sources are moderately to strongly biased toward liberal causes through story selection and/or political affiliation. They may utilize strong loaded words (wording that attempts to influence an audience by using an appeal to emotion or stereotypes), publish misleading reports, and omit information that may damage liberal causes. Some sources in this category may be untrustworthy.

Overall, we rate The Intercept progressive Left Biased based on story selection that routinely favors the left. We also rate them as Mostly Factual in reporting rather than High due to previous fabricated work and censorship of writers."

https://profrjstarr.com/the-psychology-of-us/the-need-to-be-...

https://theconversation.com/outrage-culture-is-a-big-toxic-p...

https://www.theatlantic.com/magazine/archive/2019/12/social-...

https://mediabiasfactcheck.com/the-atlantic/

↑ "These media sources have a slight to moderate liberal bias. They often publish factual information that utilizes loaded words (wording that attempts to influence an audience by appeals to emotion or stereotypes) to favor liberal causes. These sources are generally trustworthy for information but may require further investigation.

Overall, we rate The Atlantic Left-Center Biased due to editorial positions and High for factual reporting based on excellent sourcing of information and a clean fact check record."

NYT headline: "lowest murder rate in 100 years, nobody really knows why"

https://www.dailysignal.com/2026/01/23/murder-rates-plummete...

"But the outrage of blaming conservatives and Trump for all the problems that society has makes me, personally, feel so good about how 'smart' and 'civilized' I am compared to all those 'Nazi' Republicans!!! No, I'm not addicted to outage and feelings of moral superiority, I just trust that the 'mainstream media' is trying to reveal 'the truth™'!"

https://www.dailysignal.com/2025/11/26/assassins-creed-break...

earthtograndma|19 days ago

Why change the title?

"Google Fulfilled ICE Subpoena Demanding Student Journalist’s Bank and Credit Card Numbers"

https://news.ycombinator.com/newsguidelines.html

relaxing|19 days ago

Agreed. The way it’s written now sound weird.

urbandw311er|19 days ago

The title should be Google handed _over_ these things. Otherwise it reads as though they were handed _to_ Google.

mmooss|19 days ago

It's both: The user handed them to Google, Google handed them to the government.

direwolf20|19 days ago

I couldn't figure out what an ICE student journalist was.

xnx|19 days ago

[deleted]

wffurr|19 days ago

Not actually a court order. That's the problem. Administrative subpoenas don't come from a judge, and the target wasn't given notice in order to challenge it in court.

bovermyer|19 days ago

[deleted]

hsuduebc2|19 days ago

I would say that it's just ordinary greed driven company. Which is basically normal corporation.

Why net negative tho?

rvz|19 days ago

[deleted]

NetOpWibby|19 days ago

I stopped using Google at least a decade ago.

Boom, gotcha.

JohnMakin|19 days ago

These kind of condescending comments are a bit much, especially when not everyone has the luxury or know-how to deFAANG their lives. For instance, whether or not (I) personally want to avoid it, I use some of this for actual work, and there is no alternative. Comments like this seem to imply then I have no right to complain about it, which is frankly ridiculous - there is a world where FAANGs can exist without being far reaching apparatuses of an authoritarian regime. They do so because it is convenient and the existing power structure incentivizes it.

Like what am I gonna do in a job interview - "Oh, you guys use gsuite? Sorry, I deFAANGed."

Come on.

barbazoo|19 days ago

> So when are you going to stop using Google? (Never)

Why the meta commentary? Obviously some of us have unFANGed their lives.

FpUser|19 days ago

[flagged]

tomhow|19 days ago

Please don't fulminate or advocate violence here. HN is not the place for this kind of rhetoric. You may not owe federal government agents better, but you owe the HN community better if you want to participate here. We've had to ask you many times to observe the guidelines. https://news.ycombinator.com/newsguidelines.html

hsuduebc2|19 days ago

[flagged]

Anonbrit|19 days ago

Several companies have resisted these court orders successfully. Google can afford a lawyer to go over the order with a fine tooth comb if they wanted to - it's just easier to roll over and let the government rub their belly.

Trump has also repeatedly used government apparatus to illegally retaliate against companies and individuals for not going hos way, with no consequence, so it is hard to entirely blame corporations for behaving that way

agilob|19 days ago

They changed the motto to "do the right thing", because, apparently "evil" is too ambiguous. "Do the right thing" is more suitable motto for a company whos CEO was a buddy of Epstein. Tech CEOs helped get Trump elected and strengthen ICE regime to protect the billionaires, they were all involved.

mike_bob|19 days ago

Remember "Don't be evil"? It's crazy anyone would trust a corporation with anything these days.

tjwebbnorfolk|19 days ago

It's crazy that "corporations = bad" passes as insightful comment on HN these days.

RickJWagner|19 days ago

When I was a student, I could never have gone to such lengths to avoid government scrutiny.

He must have plenty of money.

yomansat|19 days ago

What's the insinuation here? He has willpower towards injustice.

hsuduebc2|19 days ago

Just out of curiosity. Are there any companies today that are seen the way Google used to be seen, as a generally “good” corporation/companies that are also a important player? Maybe Mozilla Foundation?

rchaud|19 days ago

There are no good mega-corporations, only a honeymoon period where they haven't grown large enough to start horse-trading for favorable treatment from the state.

jeffbee|19 days ago

By the way, perhaps your point of view on Google has evolved but on the question of the way Google is seen today by American consumers it is still right up there with Kleenex and Jesus. Furthermore, pretty much everyone, in America and abroad, views business as both more ethical and more effective than governments and non-governmental organizations.

InitialLastName|19 days ago

Anthropic seems to be chasing that angle (c.f. their run of "AI that doesn't advertise to you" commercials).

AlexandrB|19 days ago

Maybe Valve?

jeffbee|19 days ago

There are exactly zero organizations that will refuse to comply with subpoenas and warrants. It isn't up to business to fix the national government.

agilob|19 days ago

Blizzard, Microsoft come to mind

skeptic_ai|19 days ago

Maybe proton, but even that… is not great.