101: Lotería

Key takeaways

Advanced security measures often have vulnerabilities, especially when insider threats are involved.
Combining physical security with digital forensics can uncover corruption and criminal activity that bypasses traditional oversight.
Legal immunity and full operational authority can empower cybersecurity professionals to conduct covert investigations, but they also carry significant risks.
Sophisticated criminal enterprises, like drug cartels and illegal lotteries, often use complex schemes including money laundering, cyber manipulation, and physical smuggling to evade detection.
Persistence, technical proficiency, and a broad approach—including physical infiltration and cyber analysis—are essential to cracking high-stakes criminal cases.

Summary

Childhood and Early Interest in Computers

The episode begins with the host reflecting on his childhood, where his father would frequently invade his privacy by going into his room or opening his mail. To monitor his father’s movements, he sets up an early warning system using crinkling newspaper outside his door and later installs a proximity sensor that alerts him when someone approaches. His father’s cleverness in bypassing the newspaper alarm prompts him to develop more advanced tech, illustrating his early fascination with computers and security.

Military and Cybersecurity Experience

The host details his military background, having joined the Marine Corps to gain hands-on experience in cyber security, as the military was then starting to build its cyber capabilities. In boot camp, he learned combat skills, but his real interest was in digital security. After active duty, he transitioned into cybersecurity consulting, specializing in forensics and attack simulations. His military training gave him unique skills and insights into offensive and defensive cyber operations.

The Puerto Rico Lottery Investigation

While working for a consulting firm in the early 2010s, the host is assigned to investigate a mysterious $12 million monthly loss in the Puerto Rico Lottery. Over a month-long covert operation, he and his team examine every aspect of the lottery’s physical and digital security, including physical inspection of lottery balls, digital forensics, and network scans. They uncover a sophisticated insider scheme where someone inside the lottery manipulates payout amounts, effectively stealing millions from the government.

Infiltration and Digital Espionage

Using full legal authority granted by the governor, the investigator conducts covert operations, including lockpicking, hacking into old computer systems, exploiting vulnerabilities, and monitoring network traffic. He uncovers an insider changing payout amounts in real-time database logs, all while coordinating with the FBI and avoiding cartel retaliation. This segment highlights his efforts in physical infiltration, reverse engineering legacy systems, and maintaining operational security.

Cracking the Case and Closing the Net

The team traces the insider’s movements via security footage, logs, and network analysis, ultimately identifying a corrupt IT employee within the lottery. They gather evidence sufficient for arrest and indictment of multiple cartel-connected individuals who had been laundering money, smuggling drugs, and illegally harvesting lottery winnings. The operation reveals a nexus of corruption involving local criminal enterprises, with the investigation culminating in multiple arrests and convictions.

Reflections and Risks of Cyber Surveillance

The episode concludes with reflections on the extreme measures taken—ranging from hacking and lockpicking to risking personal safety and potential cartel retaliation. The host discusses the importance of legal immunity, covert operations, and the danger posed by organized crime. He touches on the broader implications of cyber investigations in high-stakes crime environments and the sacrifices made for justice.

Show notes

In 2014 the Puerto Rico Lottery was mysteriously losing money. Listen to this never before told story about what happened and who did it.