Michael Calce

Background

Michael Demon Calce was born in 1984 and grew up in Île Bizard, Quebec, Canada. According to his own later accounts, he received his first computer around age six following his parents' separation and became deeply absorbed in exploring what it could do. By his early teens he was active in online hacker circles under the handle "MafiaBoy," associating with a loose group he referred to as TNT.

The February 2000 Attacks

In February 2000, at age 15, Calce launched a campaign of distributed denial-of-service (DDoS) attacks that he called "Rivolta" (Italian for "revolt"). Using a network of compromised university and corporate computers, he flooded target servers with traffic. The first major target was Yahoo!, then the leading web portal, which was knocked offline for close to an hour on February 7, 2000. Over the following days he directed similar floods at other prominent commercial sites, including eBay, Amazon.com, CNN, Dell, E*TRADE, and FIFA.com. By his own account, his goal was to establish dominance and notoriety for himself and his associates within underground hacker culture rather than any financial motive.

Investigation and Sentencing

The scale of the disruption prompted an intensive investigation by Canadian and U.S. law enforcement, including the Royal Canadian Mounted Police and the FBI. Estimates presented to U.S. congressional committees placed the combined damages and mitigation costs from the attacks at over a billion dollars, figures cited in testimony before Congress on the state of internet security. Calce was identified and arrested in April 2000. Because he was a minor, he was tried in Montreal Youth Court and his identity was initially protected by publication bans applicable to young offenders. In September 2001, he pleaded guilty to 56 charges related to the attacks and was sentenced to eight months of "open custody" at a youth detention facility, one year of probation, restricted internet use, and a small fine.

Aftermath and Later Career

After completing his sentence, Calce moved away from unauthorized hacking and began working publicly in the security field, including writing a security column for the Montreal newspaper Le Journal de Montréal. In 2008 he co-authored a memoir, "Mafiaboy: How I Cracked the Internet and Why It's Still Broken," with journalist Craig Silverman, describing his early life, the attacks, and his views on internet security. He has since worked as a security consultant, spoken publicly and in media interviews about cybersecurity trends, and founded a security consulting firm called Optimal Secure.

Significance

The 2000 attacks are frequently cited as one of the first cases to bring distributed denial-of-service attacks to mainstream public and governmental attention, in part because the targets were among the internet's most visible commercial brands at the time. The incident contributed to broader discussions in the United States and Canada about strengthening cybercrime law and improving the resilience of internet infrastructure, and it remains a commonly referenced early milestone in the history of DDoS attacks and juvenile cybercrime prosecutions.

Timeline

• 1984Michael Demon Calce is born in Île Bizard, Quebec, Canada.
• 2000-02-07Using the handle MafiaBoy and the project name 'Rivolta,' Calce launches a DDoS attack that takes Yahoo! offline for nearly an hour.
• 2000-02Follow-up DDoS attacks target eBay, Amazon, CNN, Dell, E*TRADE, and FIFA.com over the following days.
• 2000-04Calce is arrested by Canadian authorities following a joint investigation with the FBI.
• 2001-09-12Montreal Youth Court sentences Calce, after a guilty plea to 56 charges, to eight months of open custody, one year of probation, and restricted internet use.
• 2008Calce co-authors the memoir 'Mafiaboy: How I Cracked the Internet and Why It's Still Broken' with journalist Craig Silverman.