ISS Archive — Legal Framework

Violations identified in ISS operations, classified under the RCR Encyclopedia and applicable United States federal law.

Each section presents the classification definition from the Roblox Criminal Records (RCR) threat framework, the applicable federal statute or platform policy, and direct links to evidence within this archive. Definitions are sourced from the RCR Encyclopedia. Legal citations link to the Cornell Legal Information Institute. No legal conclusions are asserted — the evidence is presented for independent review.

Doxxing

Cyberaggression
Definition

The collection and unauthorized disclosure of personal or sensitive information — including real names, addresses, phone numbers, email addresses, family details, and social media accounts — without the consent of the individual and with intent to harass, intimidate, threaten, or harm the victim. The disclosure results in actual harm or creates a significant risk of harm — physical, emotional, psychological, or reputational.

Applicable Law
Prohibits using electronic communications to engage in a course of conduct that places a person in reasonable fear of death or serious bodily injury, or causes substantial emotional distress. Penalties: up to 5 years imprisonment; up to life if death results.
The Children's Online Privacy Protection Act establishes federal standards for the protection of children's personal information online. Restricts the collection of PII from children under 13 without verifiable parental consent.
State Anti-Doxxing Statutes
Multiple U.S. states criminalize the publication of personally identifiable information with intent to harass or endanger. Penalties vary by jurisdiction. Notable examples include California Penal Code § 653.2 and Illinois Criminal Code § 12-7.5.

Cyberstalking

Online Harassment
Definition

Repeated harassment through electronic means involving a pattern of following, contacting, or monitoring an individual without their consent. Characterized by unwanted surveillance, invasion of privacy, and persistence despite objection. The perpetrator obtains personal information without consent and uses electronic platforms to track, profile, and monitor targets.

Applicable Law
Prohibits using electronic communications to engage in a course of conduct that causes, attempts to cause, or would reasonably be expected to cause substantial emotional distress to a person. Applies to interstate electronic surveillance and monitoring.
Prohibits unauthorized access to computer systems and the obtaining of information through electronic means. May apply to social engineering and unauthorized information gathering tactics used in systematic surveillance.

Exploitation of Minors

Predatory Behavior
Definition

The deliberate targeting and exploitation of vulnerable individuals, particularly minors. Includes the systematic collection and storage of personal information on children without parental knowledge or consent. Face photographs, legal names, ages, locations, and personal contact information were compiled and maintained as intelligence dossiers on individual players — many of whom were children aged 13–16.

Applicable Law
Establishes federal standards for the protection of children's personal information online. While COPPA enforcement targets commercial operators, the statute codifies the principle that collecting personal information from children under 13 without verifiable parental consent violates federal privacy standards.
When cyberstalking targets are minors, enhanced penalties apply. The systematic surveillance and data collection on children aged 13–16 constitutes a course of conduct that would reasonably cause substantial emotional distress.
Roblox Community Standards
Explicitly prohibit collecting personal information from users, particularly minors, and using the platform infrastructure for unauthorized surveillance or intelligence gathering operations.

Espionage & Infiltration

General Malice
Definition

Obtaining sensitive information covertly to exploit or retaliate. Includes conducting unauthorized intelligence operations with formal case numbers, maintaining designated covert cells for sensitive work, and filing classified intelligence reports. ISS operated a structured intelligence apparatus with assigned officers, codenames, and formal counterintelligence investigations against community members.

Applicable Law
Prohibits obtaining information through unauthorized access to computer systems. Social engineering, infiltration of private servers, and covert intelligence collection may constitute unauthorized access under this statute.
Roblox Terms of Use § 4
Prohibits using the platform to collect information about other users without their consent, misrepresenting identity, or using the service for unauthorized surveillance or intelligence operations.
Discord Terms of Service § 3
Prohibits using the service to stalk, intimidate, or collect personally identifiable information. Operating covert intelligence operations through Discord servers violates the platform's acceptable use policy.

Corruption & Power Abuse

General Malice
Definition

The abuse of power for personal gain, creating harm or unequal advantage. Individual ISS officers held unilateral veto power over all leadership appointments across the PATHOS III community. 1,223 logged actions — permanent blacklists, ranklocks, and position bars — were issued without external oversight, appeals process, or accountability mechanism.

Applicable Law
Roblox Community Standards
Prohibit misuse of moderation or administrative privileges. Using platform infrastructure to maintain covert blacklists and exercise unilateral authority over community members violates the platform's trust and safety policies.
Discord Terms of Service
Prohibit abuse of server administrative functions and the use of the platform to coordinate actions that harm or disadvantage other users without their knowledge.

Organized Collusion

General Malice
Definition

Active cooperation in wrongdoing — group efforts to harm, harass, deceive, or coordinate surveillance operations. ISS conducted cross-server enforcement coordination with external organizations, systematically monitored 19 groups of interest, and maintained 16,125 messages in internal command channels coordinating collective surveillance operations across multiple platforms.

Applicable Law
When cyberstalking is conducted by a coordinated group, each participant who uses electronic communications to further the course of conduct may be individually liable under this statute.
Roblox Community Standards & Discord Terms of Service
Both platforms prohibit coordinated harassment, cross-platform stalking operations, and the use of platform infrastructure to organize surveillance of other users or communities.