Vondran Legal® IPTV Defense Insights - Dish-Nagrastar-Sling possible discovery 

What Happens When DISH Accuses a Seller of Providing Unauthorized Access to DISH or Sling Programming?

DISH Network, Sling TV, and their anti-piracy partner NagraStar regularly investigate businesses and individuals suspected of selling IPTV subscriptions, streaming devices, SuperBox products, access codes, applications, or other technology allegedly used to obtain DISH or Sling programming without authorization.

These matters may begin with a cease-and-desist letter, a confidential settlement demand, an investigator's purchase, or contact from outside counsel. If the dispute proceeds to federal litigation, DISH may assert claims under the Digital Millennium Copyright Act, the Federal Communications Act, or other federal and state laws.

One of the first important stages in the lawsuit is the exchange of initial disclosures and written discovery. This is when the defendant begins seeing the evidence DISH believes connects the defendant to the allegedly unlawful service.

What should you expect DISH to produce? What does the evidence actually prove? What might still be missing? And what are the most important defense issues?

This article provides a general overview.

What Is the Difference Between Initial Disclosures and Discovery?

The terms “initial disclosures” and “discovery production” are sometimes used interchangeably, but they are not necessarily the same thing.

Under Federal Rule of Civil Procedure 26(a)(1), parties generally must disclose certain information without waiting for a formal discovery request. Subject to applicable exceptions, that information includes:

• The identity and contact information of persons likely to have discoverable information;

• A description or copy of documents and electronically stored information the party may use to support its claims or defenses;

• A computation of each category of damages; and

• Potentially applicable insurance agreements.

The complete requirements appear in Federal Rule of Civil Procedure 26.

Initial disclosures are usually only the beginning. Formal discovery can later include:

• Requests for production of documents;

• Interrogatories;

• Requests for admission;

• Depositions;

• Third-party subpoenas;

• Website and domain records;

• Payment-processor records;

• Sales records;

• Expert reports; and

• Forensic examinations of devices and electronic accounts.

A production from DISH may therefore contain both materials identified in initial disclosures and additional documents produced in response to formal discovery requests.

What Evidence Might DISH or NagraStar Produce?

Although every case is different, a typical production may be organized around several recurring categories of evidence.

1. Captures of the Defendant's Website

DISH may produce screenshots or archived captures of websites allegedly used to advertise or sell streaming devices.

The captures may include product descriptions using terms such as:

• “Fully loaded IPTV box”;

• “Lifetime IPTV”;

• “One-time payment”;

• “No monthly subscription”;

• “Watch television without cable”;

• “Premium channels”;

• “Live sports”;

• “Thousands of movies”;

• “Video on demand”;

• “Seven-day playback”;

• “Backup TV”;

• “Exclusive applications”; or

• “Wholesale and resale opportunities.”

The website may also list particular applications, channel packages, technical-support services, prices, warranties, telephone numbers, email addresses, and payment methods.

What website evidence means

Website representations can be damaging because DISH may use them to show that the streaming functionality—not merely the hardware—was the product's principal selling feature.

DISH may argue that statements promising lifetime access to premium programming without subscription fees demonstrate:

• Knowledge of the streaming functionality;

• Intent to promote or induce unauthorized access;

• Financial benefit from the programming;

• Participation in providing the service;

• Willful or knowing conduct; and

• Marketing of a product or service designed for circumvention.

The defense should not assume, however, that a website capture proves everything DISH alleges.

Important questions include:

• Who owned the website?

• Who wrote or approved the product descriptions?

• When was the page captured?

• Was it live when the alleged sale occurred?

• Did the defendant control the website?

• Was the content copied from a manufacturer, wholesaler, or unrelated reseller?

• Did the listed channels actually include DISH or Sling streams?

• Can DISH authenticate the capture?

• Did the defendant personally sell the product shown on the page?

A screenshot may prove that a representation appeared online. It does not automatically prove who created it, who controlled the underlying service, or where the programming originated.

2. Undercover or Controlled Purchases

DISH and NagraStar may retain private investigators or brand-protection companies to purchase a device or subscription.

The resulting production may contain:

• Purchase requests;

• Investigator emails;

• Order confirmations;

• Invoices;

• Credit-card or PayPal records;

• Shipping confirmations;

• Tracking records;

• Packing slips;

• Return addresses;

• Photographs of the packaging;

• Photographs of the device;

• Serial numbers;

• MAC addresses; and

• Chain-of-custody documentation.

Investigators may make more than one purchase, sometimes years apart.

Why controlled purchases are important

A properly documented purchase may establish that:

1. The website was operating on a particular date;

2. A particular seller accepted the order;

3. Payment went to an identified individual or company;

4. A specific device was shipped;

5. The device arrived at the investigator's location;

6. The investigator activated or tested the device; and

7. The device displayed particular applications or programming.

The defense should closely scrutinize what occurred after delivery.

Critical questions include:

• Did the box arrive with the relevant applications installed?

• Were the applications active immediately?

• Did investigators download or install additional software?

• Did investigators use credentials supplied by someone else?

• Did an app appear only after the investigator entered a website address?

• Was the device modified before testing?

• Was the box purchased from the defendant or an unrelated supplier?

• Is the serial number in the testing report the same serial number shown in the purchase documentation?

• Was the device preserved in its original condition?

If an investigator materially altered the device before testing it, that can affect the strength of DISH's claim that the defendant sold a preconfigured circumvention device.

3. Photographs and Videos of Device Testing

The production may contain pictures or recordings of investigators:

• Opening the package;

• Connecting the device to a television;

• Completing initialization;

• Opening an application store;

• Installing applications;

• Navigating streaming menus;

• Opening live television channels;

• Viewing movies or sports; or

• Recording information displayed by the device.

These materials can be visually compelling, especially to a judge or jury. A video showing premium programming playing on a box purchased from the defendant makes the case appear straightforward.

But appearances do not resolve the technical issues.

A photograph of a television program does not necessarily establish:

• The source of the stream;

• That the stream originated from DISH or Sling;

• Who captured or retransmitted it;

• Whether DISH's digital rights management was circumvented;

• Who performed the alleged circumvention;

• Whether the seller knew the stream was derived from DISH; or

• Whether the seller controlled the servers.

The technical connection between the programming displayed and the protected DISH or Sling transmission remains a crucial part of the case.

4. YouTube Videos and Technical-Support Instructions

DISH may collect a defendant's YouTube videos, social-media posts, customer-support messages, installation instructions, or troubleshooting communications.

For example, a video may demonstrate how to:

• Open the device's browser;

• Visit a specified website;

• Download an application store;

• Install proprietary applications;

• Activate a streaming application;

• Enter a device code; or

• Restore applications missing from the device.

Why installation videos can be significant

DISH may argue that instructional content demonstrates active participation extending beyond the passive sale of general-purpose hardware.

An installation video could potentially support allegations of:

• Knowledge;

• Intentional assistance;

• Inducement;

• Technical support;

• Continued participation;

• Distribution of circumvention-related technology; or

• Trafficking in a component used to obtain protected programming.

Timing is especially important. A video published after the defendant received a cease-and-desist letter may be used to support an allegation of willfulness.

Nevertheless, installing an application is not necessarily the same as circumventing DISH's DRM. The defense should determine whether the instructions actually involve defeating access controls or merely installing software supplied by the device manufacturer.

A video showing the installation of an app store may not show:

• Decryption of a DISH or Sling signal;

• Extraction of a Widevine, FairPlay, or PlayReady key;

• Access to a DISH subscriber account;

• Operation of the underlying streaming servers; or

• Knowledge of the source from which the application obtained its content.

The distinction between facilitating access to an application and personally circumventing a protected transmission may be central to the defense.

5. Investigator Communications

DISH may produce emails between its personnel and outside investigators.

These communications can reveal:

• Why a particular seller was targeted;

• What the investigator was instructed to purchase;

• Whether the box arrived with instructions;

• Whether the investigator contacted the seller;

• What questions were asked;

• How the seller responded;

• Whether a new instructional video was posted;

• Whether the investigators believed they had obtained sufficient evidence; and

• How much DISH paid for the investigation.

These communications should be reviewed carefully for inconsistencies and evidentiary gaps.

For example:

• Did the investigator ask leading questions?

• Did the investigator misrepresent what was wrong with the device?

• Was the seller merely providing ordinary customer service?

• Did the investigator install software not supplied by the seller?

• Did DISH stop requesting information because a public video appeared?

• Were important communications omitted from the production?

• Did the investigator preserve the original emails, website chats, and recordings?

Communications with an outside investigative vendor are not automatically privileged merely because they contain a confidentiality or work-product disclaimer. Privilege, work product, waiver, and discoverability require a document-specific legal analysis.

6. Earlier Demand Letters and Notices

The production may include prior cease-and-desist letters, settlement proposals, delivery records, and email transmittals.

DISH or NagraStar may have accused the defendant of violating:

• 17 U.S.C. § 1201(a)(1);

• 17 U.S.C. § 1201(a)(2);

• 17 U.S.C. § 1201(b)(1);

• The Federal Communications Act;

• Copyright law; or

• Related state laws.

The letters may identify a small number of allegedly intercepted channels and assert that DISH or Sling used DRM systems such as:

• Google Widevine;

• Apple FairPlay; or

• Microsoft PlayReady.

Why prior notices matter

Prior notices can become central evidence concerning knowledge and willfulness.

DISH may argue:

1. The defendant was expressly informed of the alleged unlawful activity;

2. The letter identified the service and legal theory;

3. The defendant was instructed to stop;

4. The defendant continued selling or supporting the devices; and

5. Continued conduct after notice was knowing and deliberate.

The defense should determine whether the letter was actually received. An email sent to an old address or a letter mailed without proof of delivery does not necessarily establish actual knowledge.

The content of the notice also matters. A generic accusation may not provide sufficient information for a reseller to understand which product, application, channel, or supplier was allegedly unlawful.

7. DISH's Technical Testing Results

A demand letter may state that investigators located one or more Sling channels on the accused service. A letter might identify:

• The test date;

• The channel name used by the service;

• The corresponding DISH or Sling channel; and

• The DRM that DISH says protects the transmission.

But the letter itself is not the underlying forensic proof.

The defense should request:

• The complete testing report;

• Packet-capture data;

• Screen recordings;

• Watermark evidence;

• Subscriber identifiers;

• Account credentials used during testing;

• Device logs;

• Network logs;

• Hash values;

• Test protocols;

• The qualifications of the investigator;

• All software used during testing;

• The basis for identifying the stream as originating from Sling;

• Chain-of-custody records; and

• Any expert analysis.

One of the most important defense questions is how DISH determined that the programming came from its protected transmission rather than another source carrying the same channel.

The fact that A&E, Showtime, or another network appeared on a device does not necessarily prove that the particular stream originated from DISH or Sling.

What Does DISH Have to Prove Under the DMCA?

Section 1201 of the Digital Millennium Copyright Act addresses circumvention of technological measures that protect copyrighted works.

Among other things, the statute restricts trafficking in technology, products, services, devices, components, or parts that:

• Are primarily designed or produced to circumvent an effective technological measure;

• Have only limited commercially significant purposes other than circumvention; or

• Are marketed for use in circumventing an effective technological measure.

The full statutory language appears in 17 U.S.C. § 1201.

The statute's application is highly fact-dependent. Selling an Android device capable of lawful uses does not automatically establish a DMCA violation. The focus may include:

• What the device or component was designed to do;

• How it was configured;

• What applications were supplied;

• How it was marketed;

• What the defendant knew;

• Whether the defendant provided codes or credentials;

• Whether the defendant provided activation assistance;

• Whether the defendant had a relationship with the upstream service;

• Whether an effective technological measure was circumvented; and

• Whether the defendant's product or service was sufficiently connected to that circumvention.

What Damages Can DISH Seek?

Under 17 U.S.C. § 1203, a prevailing plaintiff may seek civil remedies that can include:

• Injunctive relief;

• Actual damages;

• The defendant's profits;

• Statutory damages;

• Impoundment;

• Destruction or modification of devices;

• Costs; and

• Potentially attorney's fees.

For certain § 1201 violations, statutory damages may be elected in a range of $200 to $2,500 per act of circumvention, device, product, component, offer, or performance of service, as the court considers just.

That does not mean DISH automatically receives $2,500 for every box ever sold. The parties may dispute:

• What constitutes a separate violation;

• Whether every unit was configured alike;

• Whether every sale involved DISH programming;

• Whether every device contained circumvention technology;

• Whether transactions should be aggregated;

• How many sales are actually proven;

• Whether the defendant was an innocent violator;

• Whether multiple legal theories improperly duplicate damages; and

• Whether the requested award is proportionate to the established conduct.

The damages computation in the initial disclosures should therefore be examined carefully. A large demand is not a substitute for a supported, transaction-specific calculation.

Important Weaknesses to Look for in DISH's Production

Even a substantial production may leave important gaps.

No underlying forensic report

A demand letter stating that DISH found its programming is not the same as producing the forensic evidence establishing the source of the stream.

No direct evidence of personal circumvention

The defendant may have sold hardware without obtaining DRM keys, decrypting signals, operating servers, or capturing programming.

No proof of control over the service

A reseller may not control the upstream IPTV platform, application, channel lineup, server, or activation system.

No reliable sales calculation

A handful of investigator purchases does not establish the total number of relevant devices sold.

No proof that every device was similarly configured

Different device models, dates, suppliers, applications, or firmware versions may create materially different factual circumstances.

Investigator modification of the device

If investigators installed the relevant applications themselves, DISH must explain why the resulting configuration should be attributed to the seller.

Weak attribution of websites or accounts

Similar websites, telephone numbers, product language, or branding may support an inference of common control, but they do not necessarily conclusively prove ownership.

Limited DISH-specific content

An enormous channel list may contain only a few streams allegedly connected to DISH or Sling. The scope of recoverable damages should be tied to legally actionable conduct supported by evidence.

Important Takeaways for Someone Facing a DISH or NagraStar Demand

1. Preserve everything immediately

Do not delete websites, messages, invoices, supplier communications, devices, videos, merchant records, or customer lists after receiving a demand letter.

Preserve:

• Website backups;

• Product descriptions;

• Shopify or e-commerce records;

• eBay, Amazon, and Walmart records;

• PayPal, Venmo, Stripe, and bank records;

• Supplier invoices;

• Customer-support communications;

• Shipping records;

• YouTube videos;

• Social-media posts;

• Devices and packaging;

• Emails; and

• Text messages.

Deletion after notice can create a separate spoliation problem.

2. Stop first and investigate carefully

Continuing the accused activity after receiving written notice can substantially increase the risk. A temporary suspension of sales while counsel investigates may prevent DISH from developing a stronger willfulness narrative.

Stopping sales is not necessarily an admission of liability. It may be a prudent risk-management decision.

3. Identify the upstream supplier

Determine:

• Who supplied the devices;

• Who created or maintained the applications;

• Who operated the servers;

• Who controlled the channel lineup;

• Who issued activation codes;

• What the supplier represented about legality;

• Whether the supplier offered indemnification; and

• Whether the supplier remains available.

Do not casually disclose an upstream supplier before evaluating confidentiality, contractual duties, litigation strategy, and settlement terms.

4. Separate hardware sales from service sales

A central issue may be whether the defendant:

• Sold ordinary hardware;

• Sold preconfigured hardware;

• Sold access codes;

• Sold subscriptions;

• Received recurring revenue;

• Controlled the service;

• Provided technical support; or

• Participated in the underlying retransmission system.

Those are materially different levels of involvement.

5. Determine actual sales and profit

DISH may calculate damages using assumptions about retail price and estimated profit. Prepare accurate records showing:

• Number of units sold;

• Purchase cost;

• Shipping expense;

• Platform fees;

• Refunds;

• Chargebacks;

• Taxes;

• Advertising costs;

• Net profit; and

• Sales occurring before and after notice.

Gross revenue is not the same as profit.

6. Analyze receipt of every notice

Document whether the defendant actually received each letter or email.

Check:

• Certified-mail receipts;

• Tracking records;

• Email accounts;

• Spam folders;

• Employee access;

• Travel dates;

• Address changes; and

• Whether the recipient named in the letter had authority.

7. Do not assume the demand amount reflects proven damages

DISH and NagraStar demands may be framed as deterrence-based settlements. The amount requested may exceed the defendant's profit or the presently demonstrated harm.

A reasonable settlement analysis should consider:

• Strength of the technical evidence;

• Number of provable transactions;

• Duration of sales;

• Conduct after notice;

• Defendant's level of involvement;

• Cooperation;

• Cessation;

• Ability to pay;

• Litigation costs; and

• Scope of the requested release and injunction.

8. Carefully review the proposed injunction

A settlement agreement may restrict more than the specific product at issue. It may prohibit selling or assisting with:

• IPTV devices;

• Streaming services;

• Access codes;

• Modified applications;

• Similar products;

• Products carrying any DISH-affiliated programming; or

• Technology capable of unauthorized access.

The language should be sufficiently clear that the defendant can comply without unintentionally surrendering unrelated lawful business activities.

9. Obtain a complete release

Payment alone is not enough. Any settlement should clearly identify:

• The released individuals and entities;

• DISH, Sling, NagraStar, and relevant affiliates;

• The products and conduct covered;

• The applicable time period;

• Known and unknown claims;

• Whether officers, employees, owners, and related companies are protected;

• Confidentiality obligations;

• Non-disparagement terms;

• Cooperation requirements; and

• Whether upstream-supplier disclosure is required.

10. Do not ignore the letter

Ignoring a DISH or NagraStar notice can allow the claimant to argue that the defendant knowingly continued after receiving formal warning.

A prompt response through experienced counsel can preserve defenses, stop escalation, request the evidence, and open a path toward a negotiated resolution.

The Bottom Line

Discovery in a DISH or NagraStar anti-piracy case may include website captures, undercover purchases, shipping records, device photographs, app-installation videos, investigator communications, channel-testing allegations, and prior cease-and-desist letters.

This evidence can create a persuasive narrative connecting a seller to an allegedly unlawful streaming service. It may be particularly damaging when sales or technical support continued after the defendant received notice.

But the initial production may not answer the most important technical questions:

• Who circumvented DISH's DRM?

• How was the programming obtained?

• Who operated the servers?

• Did the seller control the service?

• How did DISH identify the stream as originating from Sling?

• How many legally actionable devices or transactions can DISH actually prove?

• Did investigators modify the devices before testing them?

A person accused of selling circumvention technology should not assume that a large demand means DISH has already proven every element of its case. At the same time, the demand should be taken seriously. The combination of aggressive statutory remedies, post-notice evidence, extensive electronic discovery, and federal litigation costs can create substantial exposure.

The best response is an early, evidence-driven investigation focused on preservation, cessation, sales records, supplier relationships, technical causation, notice, damages, and a carefully negotiated global resolution.

This article provides general information and is not legal advice. Every DISH, Sling TV, NagraStar, IPTV, and DMCA circumvention matter depends on its particular facts, evidence, jurisdiction, and procedural history.