He has not confessed so there is no explanation from his part. I read the police investigation (it has been "leaked" to WikiLeaks but it is actually official)

He has not confessed so there is no explanation from his part. I read the police investigation (it has been "leaked" to WikiLeaks but it is actually official) Some of the evidence: The IRC nick "tLt" brags about the intrusion. Svartholm acknowledges that he has used this nick in the past but not to make these statements. However, in conversations where the bragging has been done, other chat participants have asked something like "Anakata: Are you still in Cambodia" and tLt answers the question. There are files on his computers that originated on the intruded computers. There are files on the intruded computers that originates on his computers (build artifacts etc). Svartholm acknowledges that his computer must have been used for the intrusion, but that he did not do it. He says that Remote Desktop or Powershell Server must have been used. However, forensic investigations of Windows logs etc show that no one has ever logged in with these services since the OS was installed. One / some of the intrusions have by using the login credentials of Monique Wadsted, lawyer supporting the prosecution in the Pirate Bay trial.