Tulsa Computer Crimes Lawyer for Oklahoma Computer Crime Charges

What Is a Computer Crime in Oklahoma?

Oklahoma law prohibits several different kinds of computer-related conduct. The law addresses unauthorized access, exceeding authorized access and then taking or changing data or other property, using computers for fraud or extortion, interfering with computer services, helping someone gain prohibited access, certain computer based threats or harassment, and soliciting another person to commit prohibited computer conduct.

These accusations are not interchangeable. Simply accessing a computer without authorization is treated differently from accessing it and destroying or copying data, and using a computer to annoy or harass someone is classified differently from using a computer to put someone in fear of physical harm or death.

Unauthorized Access and the Limits of Permission

Authorization is one of the central questions in many computer crime cases. A person may have had legitimate access to a computer, account, network, database, or business system at one point but later be accused of using that access after permission ended or going beyond what the permission allowed.

A working username or password does not resolve that issue by itself. Employment responsibilities, account ownership, written policies, administrator permissions, contracts, communications, prior practices, and evidence showing what access had actually been granted may all help establish the scope of a person's authority.

Oklahoma law also distinguishes unauthorized access from exceeding authorized access and then damaging, modifying, copying, deleting, disclosing, or taking possession of data or other covered property. The actual activity after access was obtained can change a misdemeanor allegation into a felony accusation.

When Unauthorized Access Becomes a Felony

Entering or attempting to enter a computer system without authorization is not automatically the same offense as damaging or taking information from that system. Under the Computer Crimes Act, unauthorized access by itself is classified as a misdemeanor, while several forms of unauthorized access combined with additional conduct are Class C2 felonies.

For example, prosecutors may pursue a felony theory when they claim someone willfully accessed a system without authorization and damaged, altered, deleted, copied, used, disclosed, or took possession of data or other covered property. Similar felony treatment applies when prosecutors claim a person had some authority to enter the system but deliberately exceeded that authority and then engaged in specified conduct involving the computer or data.

Computer Fraud Does Not Require Traditional Hacking

Another felony provision focuses on using a computer, computer system, computer network, or other covered property to carry out a fraudulent scheme. This theory does not depend on proving that someone secretly broke into a protected system.

The accusation instead focuses on whether the computer was used as part of a scheme to defraud, deceive, or extort, or to obtain money, property, data, services, or another thing of value through a false or fraudulent pretense or representation. Emails, electronic transactions, account records, messages, business records, financial records, and information showing who controlled the relevant accounts may become important evidence.

A failed business transaction or disputed financial arrangement does not automatically prove computer fraud. Prosecutors still have to prove the required fraudulent intent and connect the accused person to the alleged scheme.

Disrupting Computer Services or Helping Someone Gain Access

The Computer Crimes Act also makes certain interference with computer services a felony. This includes willfully and without authorization disrupting computer services or denying an authorized user access to computer services under the circumstances covered by the law.

Providing or helping provide another person with a way to obtain prohibited access is also treated as a felony. Evidence may include account credentials, access logs, messages between people involved, system records, remote access information, or forensic evidence showing how the system was entered.

The statute contains an express protection for authorized security testing performed to evaluate a computer, network, or system for threats or vulnerabilities. Permission and purpose can be decisive when conduct that looks suspicious to an investigator was actually authorized cybersecurity or information technology work.

Computer Harassment and Threats

Oklahoma law also reaches certain conduct in which a computer, computer system, or network is used against another person. Willfully using a computer to annoy, abuse, threaten, or harass another person is a misdemeanor under the Computer Crimes Act.

The classification changes when prosecutors allege that someone willfully used a computer, system, or network to put another person in fear of physical harm or death. That conduct is classified as a Class C2 felony.

The content of the communications is only one part of the evidence. Account ownership, device access, timestamps, IP information, messages before and after the alleged threat, screenshots, platform records, and evidence identifying who actually sent the communication can all become important.

Soliciting Another Person to Commit a Computer Crime

Oklahoma law also makes it a felony to willfully solicit another person to commit conduct prohibited by the Computer Crimes Act. Payment is not required for the solicitation provision to apply.

A solicitation accusation may depend heavily on communications between the people involved. Text messages, encrypted messages, emails, online conversations, payment records, instructions, and surrounding communications may be used to determine what was actually being requested and whether the alleged request involved prohibited conduct.

Evidence in an Oklahoma Computer Crime Case

Computer crime cases can generate a large amount of electronic evidence, but the existence of digital records does not mean every conclusion drawn from them is correct. A login can show that credentials were used without necessarily answering who used them, whether that person had permission, or what the user intended to do.

Rob examines access logs, account histories, device information, messages, emails, system permissions, employment records, security policies, financial records, audit logs, photographs, video, and forensic reports when those materials are relevant to the accusation. He also looks at the timeline because changes in employment, account permissions, passwords, administrator access, business relationships, or ownership can affect whether particular computer activity was authorized.

Attribution can become especially important when several people use the same computer, network, wireless connection, business account, or set of credentials. An IP address, device identifier, or account name may be an important piece of evidence without independently proving who was sitting at a keyboard or controlling a device at a particular time.

Searches of Computers, Phones, and Online Accounts

Computer crime investigations frequently involve search warrants for electronic devices and online information. Police may seek access to computers, phones, storage devices, email accounts, cloud data, business servers, or records held by technology companies when they believe those sources contain evidence.

Rob reviews the warrant, the facts offered to establish probable cause, what devices or accounts the warrant authorized police to search, and what investigators actually seized and examined. Electronic searches can produce enormous amounts of personal information, so the scope of the warrant and the way the search was carried out can become important defense issues.

If investigators ask you to consent to a search of a computer, phone, or account while investigating suspected criminal conduct, you should decline to consent and ask to speak with a lawyer. You should not physically interfere with law enforcement, but you do not need to voluntarily expand a search by agreeing to it.

Felony and Misdemeanor Computer Crimes

Oklahoma divides the conduct listed in § 1953 into felony and misdemeanor offenses. Unauthorized access alone, unauthorized use of computer services, and using a computer to annoy, abuse, threaten, or harass another person are misdemeanor violations.

Felony violations include specified unauthorized access involving damage, alteration, copying, use, disclosure, or possession of computer property or data; using a computer in a fraudulent scheme; exceeding authorization and engaging in specified conduct involving data or computer property; disrupting computer services; helping provide prohibited access; using a computer to put someone in fear of physical harm or death; and soliciting another person to commit conduct prohibited by the Act.

The charging document should identify what prosecutors claim the accused person actually did. Treating every allegation as simply “hacking” can obscure the element that separates a misdemeanor from a felony.

Penalties for Oklahoma Computer Crimes

A felony violation of the Oklahoma Computer Crimes Act is a Class C2 felony. For a person sentenced under the ordinary Class C2 range without a qualifying enhancement, the authorized prison sentence is up to seven (7) years, and the Computer Crimes Act authorizes a fine between $5,000 and $100,000, prison, or both. Prior qualifying convictions change the punishment range under Oklahoma's felony classification system. The exact criminal history has to be reviewed before determining the applicable sentencing range in a particular case.

A misdemeanor violation carries up to thirty days in the county jail, a fine of up to $5,000, or both. The owner or lessee of a computer, system, network, program, or data may also pursue a separate civil action for certain compensatory damages after a conviction under the Act.

Defense Issues in a Computer Crime Case

The defense begins with the specific subsection prosecutors are relying on. An unauthorized-access case raises different questions from a computer-fraud case, a data destruction allegation, a service disruption case, or an accusation involving threatening communications.

Rob looks at who owned or controlled the computer or account, what permission existed, whether that permission changed, what the accused person actually did after gaining access, and whether the digital evidence reliably connects that activity to the accused person. In fraud cases, the communications and transactions also have to support the alleged intent to deceive or obtain something of value.

Technical evidence should be considered together with ordinary evidence. Employment records, contracts, company policies, witness statements, emails, text messages, account ownership, business practices, and the history between the people involved may explain access that otherwise looks suspicious when viewed in isolation.

What to Do If You Are Under Investigation for a Computer Crime

If detectives or investigators want to question you about suspected computer activity, you should decline to answer questions and ask to speak with a lawyer. Trying to explain an account login, deleted file, financial transaction, message, or business dispute before you understand the accusation can create statements that later become part of the prosecution's evidence.

Preserve computers, phones, account records, messages, emails, access information, business documents, policies, and other records that may be relevant. Do not delete files, wipe a device, change records, conceal evidence, access an account you have been told not to access, or contact another person in a way that could create a separate allegation.

Frequently Asked Questions About Oklahoma Computer Crimes

Is hacking a felony in Oklahoma?

It depends on what conduct is being described as “hacking.” Unauthorized access by itself is a misdemeanor under § 1953, while unauthorized access combined with specified conduct involving damage, alteration, copying, use, disclosure, or possession of computer property or data is a Class C2 felony. The charging language and evidence have to be reviewed to determine which provision applies. The everyday word “hacking” does not identify the statutory offense or punishment.

Can I be charged if I had a valid password?

Yes, because possession of valid credentials does not necessarily establish legal authorization for every use of an account or computer system. A person who previously had legitimate access may be accused of exceeding the limits of that authorization or using credentials after permission ended. The defense can examine how the credentials were obtained, the person's role, company policies, account ownership, communications granting permission, prior practices, and whether access restrictions had actually been communicated.

Is unauthorized computer access always a felony?

No. Willfully gaining or attempting to gain unauthorized access by itself is classified as a misdemeanor under the Oklahoma Computer Crimes Act. Felony treatment applies to other specified conduct, including unauthorized access followed by certain actions involving data or computer property, specified conduct after exceeding authorized access, computer fraud, disruption of services, assisting prohibited access, certain threats, and solicitation.

Can using a computer for fraud be charged even if I was allowed to use the computer?

Yes. Oklahoma's computer fraud provision focuses on using a computer or covered system as part of a scheme involving fraud, deception, extortion, or obtaining money, property, data, services, or another thing of value through false representations.

The State still has to prove the required fraudulent intent and connect the accused person to the alleged scheme. Permission to use a device does not by itself answer whether the computer was allegedly used for a prohibited fraudulent purpose.

Can computer harassment be a felony?

Using a computer to annoy, abuse, threaten, or harass another person is classified as a misdemeanor under § 1953. Using a computer, system, or network to put another person in fear of physical harm or death is classified as a Class C2 felony.

The actual communications and surrounding circumstances determine which theory prosecutors may pursue. Identifying who sent the communication is also an essential factual issue when account or device access is disputed.

Can Oklahoma prosecute a computer crime when the computer is somewhere else?

Computer activity can cross city, county, and state lines, and Oklahoma law contains jurisdiction provisions addressing access from one jurisdiction into another. The location of the accused person, computer system, affected data, victim, and other conduct may become important when determining where a case can be prosecuted.

Jurisdiction should be evaluated from the actual facts rather than assumed from the location of one device. Multi-jurisdiction investigations can also involve federal law or authorities from another state.

Should I give police my password or explain what happened?

If you are being questioned about suspected criminal conduct, you should decline to answer questions and ask to speak with a lawyer. You should also decline to consent to a voluntary search of your devices or accounts.

Preserve the evidence instead of deleting or altering it. A lawyer can review the warrant, account records, permissions, communications, and other evidence before deciding how the accusation should be addressed.