SAP pays $20M to settle criminal charges in Oracle case
SAP pleads guilty to unauthorized computer access and IP theft charges
IDG News Service - SAP has agreed to pay just over US$20 million to settle a criminal case brought against its TomorrowNow subsidiary.
SAP Chief Financial Officer of Global Customer Operations Mark White pleaded guilty Wednesday on behalf of his company to charges that employees of TomorrowNow accessed Oracle's customer support portal without authorization and illegally downloaded software and support documents. In a plea agreement struck between SAP's TomorrowNow subsidiary and the U.S. Department of Justice, the company agreed to pay $20,004,800 in fines and submit to three years of corporate probation.
"Twenty million dollars reflects the seriousness of the conduct especially in light of the size of TomorrowNow, the revenues that it earned during its existence and in light of the restitution that is going to be paid in the civil case," said Kyle Waldinger, the Department of Justice's lead attorney on the case.
The $20 million isn't much when compared to the $1.3 billion in damages a civil jury ordered SAP to pay Oracle last year after arriving at a guilty verdict over related allegations.
SAP acquired TomorrowNow, a seller of PeopleSoft and JD Edwards support services, in early 2005, shortly after Oracle acquired both software companies. In the years after the acquisition, some of TomorrowNow's 160 employees secretly logged into Oracle's customer support portal, using logins belonging to Oracle customers to download the unauthorized material.
Oracle says they used that information to move PeopleSoft and JD Edwards customers to SAP's platform.
The exact amount that SAP should pay Oracle in restitution for these actions is still being debated. SAP has appealed the $1.3 billion jury verdict, asking for a retrial, and that case is ongoing.
In agreeing to the charges, SAP said it would cooperate with any criminal investigations into company employees related to the case, but it's not clear if any more criminal charges will be filed. The DoJ declined to comment on the matter. Speaking with reporters outside the courtroom, SAP's outside counsel, Gregory Lanier, said he had no idea whether there was an ongoing criminal investigation.
Lanier said that SAP was "pleased to get to the resolution" of the criminal case.
Oracle elected not to make an appearance in court Wednesday, but in a statement the company said, "Oracle has spent the last four years uncovering SAP's massive copyright theft and SAP finally pleaded guilty in Federal Court to criminal charges for its illegal scheme."
The case was heard at the U.S. District Court for the Northern District of California in Oakland.
Robert McMillan covers computer security and general technology breaking news for The IDG News Service. Follow Robert on Twitter at @bobmcmillan. Robert's e-mail address is robert_mcmillan@idg.com


- Excel 2010 Cheat Sheet
- Register for this Computerworld Insider Cheat Sheet and gain access to hundreds of premium content articles, guides, product reviews and more.
- Practice Management: Double Billing Rate and Improve Patient Services
- Would you like to double your billing rate and achieve faster payment for services?
Download this customer success story to see how One Health... - Mission Critical Data Explosion and Customer Case Study
- Would you like to double your tier 1 storage capacity while simultaneously reducing your storage footprint?
Download this customer success story to see how... - Protecting Against Database Attacks and Insider Threats: Top 5 Scenarios
- Read this new eBook to learn the top five scenarios and essential best practices for preventing database attacks and insider threats.
- Database Activity Monitoring Is Evolving
- Read the analyst report and learn how you can leverage the core capabilities of a DAP solution for better database security.
- Establishing a Strategy for Database Security is No Longer Optional
- The options for securing increasingly valuable databases are very broad and deep, and can be confusing. This research provides an overview of three... All Cybercrime and Hacking White Papers
- Distributed Database Security with Real-time Monitoring
- View this demo and learn how IBM InfoSphere Guardium database activity monitoring can help protect your sensitive data in distributed DBMS environments with...
- InfoSphere Warehouse Packs Demo
- These flash modules make warehousing more tangible and relevant to business users through detailed explanations of the InfoSphere Warehouse Packs.
- Delivery Management -- Extending Lifecycle Management
- Date: Wednesday, June 20, 2012, 1:00 PM EDT
Siloed organizations continue doing the wrong things and doing things wrong, leading to increased costs,... - Leverage automation today to reduce IT complexity
- Date: Tuesday, June 5, 2012, 2:00 PM EDT
Whether your B2B complexity is caused by multiple technologies due to M&A, business or application specific... - Redefine Expectations in the Data Center
- Need to do more with less? Watch this video to learn how HP ProLiant Gen8 servers can help your business deploy servers three... All Cybercrime and Hacking Webcasts