Lawyer (L) says my friend (F) hacked his client’s site and posted stolen passwords on forums. F did not do it, but his system was likely used by others.
F was threatened with a lawsuit unless he agrees to do something questionable.
L said that his forensic company collected thousands of IP addresses of people who used the passwords. L will name F as defendant and ask court to order ISPs to unmask IP owners to help him investigate the hack. I suspect L wants to intimidate these people and coerce payments from them. L said that judges are reluctant to issue such orders to ISPs, so F has to sign a document that he agrees: judges don’t ask questions if sides agree. L promised F will be a nominal defendant and pay nothing.
What if this agreement becomes public? Can F be criminally charged?