The Teen Who Hacked the Pentagon

The Teen Who Hacked the Pentagon
Quizzed ESL Activities

The Teen Who Hacked the Pentagon: The Story of Jonathan James

This video recounts the incredible and tragic story of Jonathan James, a prodigy who became the first minor to be imprisoned for cybercrime in the United States. At just 15 years old, James managed to breach highly secure networks, including NASA and the Pentagon, exposing critical vulnerabilities in national security systems. His journey from a gifted child hacker to a federal inmate highlights the complex ethical dilemmas surrounding digital security and the often-misunderstood world of ethical hacking.

The Prodigy’s Early Exploits

From an early age, Jonathan James displayed an extraordinary aptitude for computers. By age eight, he had already cracked parental controls and even manipulated his school’s grading system. Operating under the alias “comrade,” he quickly gained recognition in underground hacking communities, absorbing advanced techniques like buffer overflows and packet sniffing that were unknown to most programmers at the time. His early targets included Bell South, a Fortune 500 telecom giant, which he breached without causing damage, viewing it merely as “practice.”

NASA: A Stepping Stone to the Pentagon

In June 1999, James stumbled upon an unsecured NASA server and, to his astonishment, found its security to be laughably weak. Within minutes, he gained root access to 13 interconnected machines, including those managing environmental control and life support systems (ECLSS) for the International Space Station. He downloaded the entire ECLSS source code, valued at $50,000 per line. This intrusion led to NASA taking critical systems offline for three weeks, costing millions and putting astronauts on emergency protocols.

Breaching the Pentagon’s Defenses

Inspired by a challenge from another hacker, James set his sights on the Pentagon, specifically the Defense Threat Reduction Agency (DTRA). He exploited an unpatched vulnerability in their Cisco router, gaining “enabled mode access.” For 10 weeks, he deployed a custom packet sniffer, capturing thousands of classified emails, military passwords, and sensitive documents related to nuclear defense protocols and cyber warfare strategies. He even obtained login credentials for computers within the Pentagon’s E-ring, giving a 15-year-old unprecedented insight into America’s defense posture.

Arrest, Conviction, and a Tragic End

Despite his sophisticated methods, James made a crucial mistake: occasionally connecting directly to targets. This led the FBI to his Miami home. In January 2000, he was arrested at age 16. His cooperation during interrogation revealed vulnerabilities unknown even to experts, leading to him becoming an “unwilling consultant” to the agencies he’d breached. He was sentenced to six months in federal juvenile detention and banned from computers. However, the stigma of his past persisted. In 2008, under suspicion for another major hack he did not commit, Jonathan James tragically took his own life at 24, leaving behind an encrypted folder of “Pentagon Trophies” that the FBI never cracked.

Legacy and Lessons Learned

Jonathan James’s story is a stark reminder of the immense power of digital knowledge and the critical importance of robust cybersecurity. His exploits forced national security agencies to confront their vulnerabilities and ultimately influenced the evolution of cybercrime prosecution and prevention. His legacy underscores that sometimes, the greatest threats—and the most profound insights—can come from unexpected places.

Vocabulary Table

Term Pronunciation Definition Used in sentence
vanishing /ˈvænɪʃɪŋ/ Disappearing suddenly and completely. A NASA engineer stares at his monitor when lines of code start vanishing.
breach /briːtʃ/ To make a gap in something, or to break a rule, agreement, or principle. Who was this teenager and how did he breach the Pentagon?
confiscated /ˈkɒnfɪskeɪtɪd/ Taken or seized by authority. The punishment, he got the computer confiscated for 2 weeks.
escalate /ˈɛskəleɪt/ To increase in intensity or magnitude. Never hit the same target twice. Always escalate.
unpatched /ʌnˈpætʃt/ (Of software) not having had a software fix or update applied to correct a bug or vulnerability. Jonathan scanned their network for three nights straight, found an unpatched Solaris server.
penetration /ˌpɛnɪˈtreɪʃən/ The action or process of making a way into or through something. In cybersecurity, gaining unauthorized access. The penetration lasted 4 hours. Jonathan called it practice.
declassified /ˌdiːˈklæsɪfaɪd/ (Of information or documents) officially declared to be no longer secret. Jonathan studied declassified NSA documents about TEMPEST shielding.
exploit /ɪkˈsplɔɪt/ A software, piece of data, or sequence of commands that takes advantage of a bug or vulnerability to cause unintended or unanticipated behavior to occur on computer software, hardware, or something else. He was collecting zero-day exploits.
anomalies /əˈnɒməliz/ Something that deviates from what is standard, normal, or expected. NASA’s intrusion detection system finally noticed anomalies.
exfiltrated /ˌɛksfɪlˈtreɪtɪd/ (In cybersecurity) to secretly and illegally remove data from a computer or network. Someone had installed a rootkit, created backdoor accounts, and exfiltrated data.
vulnerabilities /ˌvʌlnərəˈbɪlɪtiz/ Weaknesses or flaws in a system that can be exploited by an attacker. The router still ran IOS version 11.1, 3 years out of date with 14 known vulnerabilities.
siphoning /ˈsaɪfənɪŋ/ Drawing off or transferring (money or resources) from one place to another, especially secretly and illegally. Someone had been siphoning their entire data stream for 10 weeks.
attribution /ˌætrɪˈbjuːʃən/ The action of regarding something as being caused by a person or thing. In cybersecurity, identifying the origin of an attack. no obvious attribution markers.
interrogation /ɪnˌtɛrəˈɡeɪʃən/ The action of interrogating or questioning someone. During interrogation, he provided a complete technical breakdown of his methods.
prosecution /ˌprɒsɪˈkjuːʃən/ The institution and conducting of legal proceedings against someone in respect of a criminal charge. Judge Garber delivered a sentence that would define cyber crime prosecution for the next decade.

Vocabulary Flashcards



Lexical Focus: Collocations & Chunks

Don’t just learn isolated words—learn chunks of language. These patterns will help you speak more naturally.

  • lines of code
    Noun Collocation
    A NASA engineer stares at his monitor when lines of code start vanishing.
  • life support systems
    Noun Collocation
    Life support systems for the International Space Station.
  • kick down the door
    Phrasal Verb / Idiom
    They kick down the door to find a 15-year-old kid in his pajamas.
  • breach the Pentagon
    Verb + Noun Collocation
    Who was this teenager and how did he breach the Pentagon?
  • absorbed techniques
    Verb + Noun Collocation
    he absorbed techniques that textbooks wouldn’t teach for another decade.
  • cardinal rule
    Adjective + Noun Collocation
    One mentor taught him the cardinal rule.
  • slipped inside
    Phrasal Verb
    found an unpatched Solaris server… and slipped inside.
  • reprogram reality
    Verb + Noun Collocation
    Why study calculus when you could reprogram reality?
  • buffer overflow
    Noun Phrase / Technical Term
    First, a simple buffer overflow in the BINDDNS service.
  • national security
    Adjective + Noun Collocation
    They were pursuing a gifted child who treated national security like a video game.

De-Chunking: Complete the Expressions

Select the correct phrase from the box below to complete the sentences.

breach the Pentagon
life support systems
slipped inside
cardinal rule
national security

1. The attacker managed to with surprising ease.

2. The International Space Station relies on complex .

3. After finding a vulnerability, the hacker the network undetected.

4. Never hit the same target twice; that was his .

5. He treated like a video game.



While-viewing Tasks

Complete these tasks while watching the video to enhance your comprehension and focus:



Guided Notes

As you watch, fill in the key information about Jonathan James’s journey:

  • Jonathan James’s alias:
  • First major company he breached (before NASA):
  • The system he accessed at NASA that controlled life support for the ISS:
  • The government agency he hacked after NASA:
  • The age Jonathan James was arrested:

Questions to Answer

Listen carefully and answer the following questions in your own words:

  1. What motivated Jonathan James to hack into systems, beyond personal gain?
  2. How did Jonathan’s father inadvertently help him develop his hacking skills?
  3. Describe the “amateur mistake” that led the FBI to identify Jonathan James.
  4. What was the unexpected provision included in Jonathan James’s sentence?
  5. How did Jonathan James’s story impact the cybersecurity world and inspire future hackers?

Key Timeline Events

Note down the dates and significant events mentioned in the video:

  • 1989:
  • February 1999:
  • June 1999:
  • August 1999:
  • January 2000:
  • May 2008:

Embedded Video:

Fill in the Blanks Exercise

1. A NASA engineer stared at his monitor when lines of started vanishing.

2. For 21 days, NASA kept critical systems .

3. The attacker made one amateur by logging in from his home IP.

4. Jonathan James discovered computers at age .

5. By age , Jonathan cracked his first password.

6. He broke into Palmetto Middle School’s grading system, changing his C in math to an .

7. Online, Jonathan became .

8. His first real target came in February , Bell South.

9. NASA’s security was weaker than his high .

10. Within minutes, he owned root access on 13 interconnected machines.

11. The ECLSS source code comprised 3,471 files totaling megabytes.

12. He deployed a custom across DT’s network backbone.

13. In 4 weeks, his sniffer captured 3,312 emails and 1,879 unique .

14. Jonathan was arrested on January , 2000.

15. Jonathan James took his own life at age , leaving a note.

Vocabulary Quiz

1. What does it mean for something to be vanishing?

a) Disappearing suddenly and completely
b) Appearing suddenly
c) Growing rapidly
d) Remaining stationary

2. To breach a system means to:

a) Repair it
b) Improve its security
c) Gain unauthorized access to it
d) Analyze its performance

3. If an item is confiscated, it is:

a) Returned to its owner
b) Taken away by authority
c) Put on display
d) Given as a gift

4. What is the meaning of escalate?

a) To decrease gradually
b) To remain the same
c) To postpone a decision
d) To increase in intensity or magnitude

5. An unpatched software is one that:

a) Has not had a software update applied
b) Is fully secure
c) Is newly developed
d) Is easy to use

6. In cybersecurity, penetration refers to:

a) Fixing a network issue
b) Gaining unauthorized access
c) Encrypting data
d) Analyzing system logs

7. What does it mean for documents to be declassified?

a) They are destroyed
b) They are made more secret
c) They are officially no longer secret
d) They are translated into another language

8. An exploit in computing is:

a) A new software feature
b) Software that takes advantage of a vulnerability
c) A method for securing data
d) A type of computer virus

9. Anomalies are:

a) Normal and expected occurrences
b) Common system errors
c) Routine data patterns
d) Deviations from what is normal or expected

10. To exfiltrate data means to:

a) Secretly and illegally remove data
b) Encrypt data for security
c) Back up data
d) Share data openly

Fact or Fiction Quiz

1. Jonathan James was the youngest person ever to breach Department of Defense networks.

a) Fact
b) Fiction

2. NASA kept critical systems offline for 3 weeks after Jonathan James’s intrusion.

a) Fact
b) Fiction

3. Jonathan James sold the classified information he obtained from the Pentagon to foreign entities.

a) Fact
b) Fiction

4. The FBI was able to crack the encryption on Jonathan James’s “Pentagon Trophies” folder.

a) Fact
b) Fiction

5. Jonathan James was required to brief federal security teams about his methods as part of his sentence.

a) Fact
b) Fiction

Extension Activities

Choose from these activities to extend your learning and explore related topics:



Research & Report: Famous Hackers

Research another famous hacker or a significant cybercrime event. Prepare a short report or presentation detailing their story, methods, impact, and the legal consequences they faced.

Difficulty:
Easy

Ethical Hacking vs. Black Hat Hacking

Write an essay discussing the differences between ethical (white hat) hacking and malicious (black hat) hacking. Explore the motivations, methods, and legal/ethical implications of each. Consider Jonathan James’s actions in this context.

Difficulty:
Medium

Cybersecurity Vulnerabilities Deep Dive

Choose one of the technical terms mentioned in the video (e.g., buffer overflow, packet sniffing, SQL injection, rootkit, zero-day exploit) and research it in depth. Explain how it works, how it can be exploited, and how it can be defended against. Present your findings to the class or create an informational poster.

Difficulty:
Hard

Debate: The Patriot Act and Cybercrime

With a partner, research the Patriot Act and its impact on cybercrime laws and privacy. Prepare arguments for and against its effectiveness and ethical implications. Organize a short debate.

Difficulty:
Medium

Case Study: Legal Precedents in Cybercrime

Work with a partner to research a significant cybercrime legal case (other than Jonathan James’s). Analyze the charges, evidence, verdict, and the precedent it set for future cybercrime prosecutions.

Difficulty:
Hard

Create a Cybersecurity Awareness Campaign

In a small group, design a cybersecurity awareness campaign for your school or local community. Identify common vulnerabilities and suggest practical steps people can take to protect themselves online. This could involve posters, social media content, or a short presentation.

Difficulty:
Easy

Simulate a Penetration Test (Conceptual)

Working as a group, conceptually plan a “penetration test” for a hypothetical small business or school network. Identify potential weak points (e.g., outdated software, weak passwords, phishing risks) and propose strategies for testing and then securing them. (Note: Do NOT actually attempt to penetrate any real network).

Difficulty:
Hard

Scroll to Top