Ex-Cardinals executive pleads guilty to hacking Astros' database

HOUSTON -- The former scouting director of the St. Louis Cardinals pleaded guilty in federal court Friday to hacking into the player database and email system of the Houston Astros in an unusual case of high-tech cheating involving two Major League Baseball clubs.

Chris Correa pleaded guilty to five counts of unauthorized access of a protected computer from 2013 to at least 2014, the same year he was promoted to director of baseball development in St. Louis. Correa, 35, was fired last summer and faces up to five years in prison on each charge when he is sentenced April 11.

"I accept responsibility in this case," Correa told U.S. District Judge Lynn Hughes. "I trespassed repeatedly."

"So you broke in their house?" Hughes asked Correa, referring to the Astros.

"It was stupid," replied Correa, who is free on $20,000 bond.

U.S. Attorney Kenneth Magidson said the hacking cost the Astros about $1.7 million, taking into account how Correa used the Astros' data to draft players.

"It has to do with the talent that was on the record that they were able to have access to, that they wouldn't have otherwise had access to," he told reporters. "They were watching what the Astros were doing."

MLB could discipline the Cardinals, possibly with a fine or a loss of draft picks, but said only that it looked forward to getting details on the case from federal authorities. The Cardinals, whose chairman, Bill DeWitt Jr., had blamed the incident on "roguish behavior," declined comment.

The FBI said Correa was able to gain access using a password similar to that used by a Cardinals employee who "had to turn over his Cardinals-owned laptop to Correa along with the laptop's password" when he was leaving for a job with the Astros in 2011. The employee was not identified, though Jeff Luhnow left St. Louis for Houston in December of that year and is now the general manager of the Astros.

In a five-page charging document filed Dec. 22 and unsealed Friday, prosecutors said Correa in 2013 improperly downloaded a file of the Astros' scouting list of every eligible player for that year's draft. They say he also improperly viewed notes of trade discussions as well as a page that listed information such as potential bonus details, statistics and notes on recent performances and injuries by team prospects.

The Astros rely heavily on sabermetrics in their evaluation of players and have been open about the fact that they use a database called Ground Control to house proprietary information. In 2014, the Houston Chronicle had a detailed report on the database, noting the team even had a director of decision sciences and that everything from statistics to contract information to scouting reports were stored at a web address protected by a password.

After that story, prosecutors say, the Astros changed passwords, the website address and other security precautions involving Ground Control -- only to have Correa hack into the email system to obtain the new details and get right back into the database. Once inside the system, he viewed 118 pages of confidential information, including notes of trade discussions, player evaluations and a 2014 team draft board that had not yet been completed.

Giles Kibbe, general counsel for the Astros, said it was a "difficult day for everyone in baseball" and that all the information in the case would be turned over to the baseball commissioner's office "to guide us through this." He took issue with comments made by Correa when he told the judge he had found Cardinals' proprietary information in the Astros computer system.

"To be clear, no one at any time with the Cardinals, or anyone associated with Major League Baseball, has ever made any statement, contacted the Astros or raised any concern that anything in our database or in our network was Cardinals' proprietary information," Kibbe said.

The data breach was first reported in June 2014 when Luhnow said the Astros had been the victim of hackers. Some of the material was posted online. Thirteen months later, the Cardinals fired Correa in what was believed to be the first known fallout from the scandal, though the team did not say why he was let go.

The Astros hired Luhnow as general manager in December 2011, and he has helped turn the team into a contender after three straight 100-loss seasons. Luhnow was a key figure in the Cardinals' own database, called Redbird. At least one former Cardinals employee -- Sig Mejdal, a former NASA employee and analytics expert -- joined Luhnow in Houston.

Luhnow has not commented in detail about the case, though he has denied he used any of the Cardinals' intellectual property or information from Redbird to create Houston's database.

The Cardinals are among baseball's most successful franchises on and off the field. Only the New York Yankees have more World Series titles than the 11 won by St. Louis, which is among the best-drawing teams in all of sports. The Astros and Cardinals were rivals in the National League Central until Houston moved to the American League in 2013.