Background
Michael Hayes was convicted after representing himself at a jury trial on charges arising from a long campaign of stalking, harassment, identity fraud, computer intrusion, and witness intimidation. The evidence described unwanted contacts beginning in high school and continuing for years despite harassment-prevention orders. Investigators later found screenshots of other people’s login pages, conversations with a self-described hacker, notes about hacking social-media accounts, and images connected to the victim on Hayes’s electronic devices.
Hayes challenged evidence obtained under 2019 and 2020 warrants, contending that the first warrant did not authorize police to inspect photographs, screenshots, or the phone’s Notes application. He also attacked the sufficiency of a witness-intimidation conviction based on a mailing sent from jail to the hacker, and argued that instructions about authenticating electronic communications reduced the prosecution’s burden of proof. Both sides raised sentencing issues: Hayes objected to the original sentence, while the Commonwealth challenged the trial judge’s later decision to reduce it after considering a newly available probation risk-assessment report.
The Court’s Holding
The Appeals Court affirmed the convictions and the later sentence reduction. On the search issue, it held that a digital search may extend to locations where the evidence described in the warrant could reasonably be found. Authorization to seek login history, communications, and data related to password manipulation permitted inspection of screenshots, a picture folder bearing the victim’s name, and notes titled “Hacking Facebook profiles” and “Hacking Snapchat.” The relevant question was not whether the warrant named each application or file format, but whether those locations could reasonably contain the particularized evidence for which police were authorized to search.
The court also found sufficient evidence of witness intimidation. Hayes mailed the hacker a printout containing personal identifying information and a photograph defaced with a swastika, along with hostile accusations and slurs. In context—including Hayes’s ability to obtain the hacker’s home address and send the item there while incarcerated—the jury could find a true threat that reasonably caused fear of violence and was therefore outside First Amendment protection.
The electronic-evidence instructions were proper as well. Jurors first had to find by a preponderance of the evidence that Hayes authored a communication before considering it, while the Commonwealth still had to prove every element of each offense beyond a reasonable doubt. Authentication and identity as the perpetrator are distinct inquiries even when they substantially overlap. Finally, the sentencing judge could use a newly created risk-assessment tool because the report analyzed information that existed at the original sentencing; the judge did not rely on Hayes’s later conduct or rehabilitation. The new analytical tool did not convert the revision into an impermissible reconsideration based on postconviction events.
Key Takeaways
- A Massachusetts digital-device warrant need not list every application or file type when the searched location could reasonably hold the evidence particularly described in the warrant.
- A communication may qualify as a true threat based on context, including its delivery, the sender’s demonstrated access to private information, and the history between sender and recipient.
- Jurors apply a preponderance standard to the preliminary authentication of electronic communications but must apply the beyond-a-reasonable-doubt standard to the crime’s elements.
- A judge revising a sentence may use a new assessment tool to evaluate facts available at the original sentencing, so long as the revision does not rest on later conduct.
Why It Matters
The decision gives Massachusetts trial lawyers a practical framework for litigating searches of phones and other digital devices. Particularity remains essential, but courts will focus on whether officers searched places reasonably capable of containing the warrant’s specified evidence—not on whether police predicted every digital container in advance. That approach is especially important in stalking, harassment, and computer-crime prosecutions, where communications and access records may appear as screenshots, photographs, notes, or app data.
The opinion also separates two standards that can easily blur at trial: preliminary authentication by a preponderance and proof of criminal responsibility beyond a reasonable doubt. Its sentencing analysis likewise draws a useful line between forbidden reliance on postconviction behavior and permissible use of improved tools to reassess the original record.