Will Lewis says he helped hacking investigation. Scotland Yard had doubts.

LONDON — Will Lewis, now the publisher of The Washington Post, was in full crisis mode in 2011. Then an executive at a subsidiary of Rupert Murdoch’s News Corp, he was an intermediary to the police detectives investigating a British phone-hacking scandal that had placed the company’s journalists and top leaders in legal peril.

For years, reporters at News Corp’s bestselling British tabloid had landed scoops by paying public officials and illegally listening to the voicemail messages of royals, politicians, celebrities and even a murdered girl. Lewis was supposed to cooperate with police, identify wrongdoing and help steer the company through the crisis.

His role, he would later say, was as a force for good. He was “draining the swamp.”

But confidential documents obtained by The New York Times and interviews with people involved in the criminal investigation show that, almost from the beginning, investigators with London’s Metropolitan Police were suspicious of News Corp’s intentions, and came to view Lewis as an impediment.

The police suspected that News Corp was trying to “steer the investigation into a very narrow remit” by pointing the finger at a few journalists “while steering the investigation away from other journalists and editors,” one of the lead detectives wrote in a previously undisclosed internal summary of events.

Scotland Yard detectives were shocked to learn that the company had deleted millions of internal emails, despite notices from a lawyer for an alleged phone hacking victim and the police explicitly asking that any documents related to the investigation be preserved, according to police records and interviews with investigators.

And while the company took steps to save some relevant emails amid the deletions, the police were deeply skeptical of one of Lewis’ explanations for those deletions — especially since he admitted it couldn’t be corroborated.

The Times reporting fills out a portrait of Lewis at a crucial moment. A British career journalist who became a crisis manager at News Corp, he was thrust into a dual role as liaison to the authorities and, perhaps more important, as the protector of the Murdoch empire’s interests.

That job later propelled him into the heights of American media, as publisher first of The Wall Street Journal and now of the Post.

Today, he is again under pressure. His hand-picked editor, Robert Winnett, abruptly withdrew from the job last week after news reports linked him and Lewis to British news-gathering practices that would be considered unethical in the United States.

High-profile lawsuits are also moving forward in London, brought against News Corp by Prince Harry and other victims of hacking. The claims have not yet been tested in court but they include new details about Lewis’ role in the scandal. The episode has attracted even greater interest since Lewis tried to suppress news coverage of the litigation.

Journalists inside and outside the Post have questioned why he would do that if his role in the scandal had merely been to clean house.

The documents reviewed by the Times as well as those referenced in the lawsuits center on seven crucial months in the hacking scandal, from January to July 2011. Scotland Yard detectives met repeatedly with Lewis or his colleagues during that period, bargaining for access to evidence. Yet behind the scenes, the company was deleting data from its servers — and not telling the police until it was too late.

The company says this was all part of a planned computer system upgrade and was not an effort to hide evidence. And prosecutors, who reviewed evidence years ago, said they found no evidence to believe otherwise.

Lewis’ role is still not fully understood. But the lawsuits offer glimpses, citing reams of internal company documents. The plaintiffs say those records show that he was involved in the effort that deleted millions of internal emails, even as he presented himself as a conduit to the police.

Lewis, who is named in the lawsuits but is not personally being sued, declined an interview request. “Any allegations of wrongdoing are untrue,” he said in a statement. “I have no further comment to make.”

One person now demanding a new investigation is Gordon Brown, a former prime minister of Britain, who had been the target of hacking and other surreptitious reporting methods.

When the police confronted Lewis about why certain emails had been removed from the servers, Lewis offered a startling response: He pointed the finger at Brown, according to police records reviewed by the Times.

The company removed the emails, Lewis told police, after receiving an unsubstantiated tip that Brown, a member of Parliament at the time, was plotting with his allies to steal emails of a top company executive.

Lewis conceded that he had no evidence to back up the tip, could never corroborate it and never mentioned it to the police until after the emails were deleted, according to police minutes of meetings.

Brown told the Times that the claims are “completely untrue and without any foundation at all.”

“I have been shocked to discover, as I did only recently, this false accusation against me,” he said. “The new allegations brought forward in court suggest that executives who claimed they were doing the cleanup may have instead been engaged in a cover-up.”

•••

‘WILL LEWIS’ LIST’

In February 2011, investigators from Scotland Yard held meetings at the headquarters of the News of the World, the Murdoch tabloid at the heart of the hacking scandal.

The scandal had been gathering speed for five months. Lawyers for actress Sienna Miller, who had long suspected that someone was hacking her phone, had put the company on notice to preserve any relevant material and then filed a lawsuit that contained explosive new evidence that would eventually lead to the suspension and firing of a top editor at the News of the World.

Under pressure, and in response to a police request for evidence, the company on Jan. 26 turned over three incriminating emails related to the editor.

That same day, Scotland Yard announced a new task force called Operation Weeting to investigate the extent of the hacking, who knew of it and who was responsible. The police told company executives to preserve all relevant documents going back a decade.

One of the officers that February day was Barney Ratcliffe, a detective inspector and homicide investigator. He met with company executives and lawyers for News International, a British subsidiary of News Corp, to hash out the terms of its cooperation.

They were not on the same page.

Ratcliffe wanted “as much information as possible.” Anything, he said, that “could establish or support the suggestion that employees at The News of the World had engaged in phone hacking,” according to his sworn statement, which contains a detailed summary of events and was filed in a separate court case.

The company said there wasn’t much information to give, meeting minutes show. The chief information officer, Paul Cheesbrough, told detectives that, for months, the company had been upgrading its corrupted and buggy email system. Because of that upgrade, he said, emails from before 2008 were gone.

The company had, however, preserved some emails that could be of interest in phone hacking litigation. Cheesbrough gave the police a list of criteria used to decide what to save. The company was willing to share what it had.

This largely limited the focus of the investigation to 18 people, police briefing notes show.

The plaintiffs in the lawsuit have dubbed this “Will Lewis’ List” because he had circulated it internally. Murdoch, his family and many top executives were not on it.

From one view, the list could be seen as an effort to preserve evidence for the police by sequestering the emails of potential suspects as the company upgraded its system, which is what News UK described in a statement given to the Times.

The plaintiffs have a different perspective. They say it was a plan to “cover up and conceal” evidence of wrongdoing by saving only some emails — and getting rid of everything else.

In either case, millions of emails were wiped off the server.

•••

‘GREEN LIGHT’

As Cheesbrough described a long-planned email upgrade in that Feb. 9 meeting, police minutes indicate and detectives say that he left out a fact that investigators have only learned recently, as evidence has emerged in the hacking lawsuit:

The bulk of the emails had been deleted only days earlier, in the investigation’s key early days. And Lewis was involved in that decision.

In January, the company deleted about 11 million emails, according to the lawsuits.

Then, on Feb. 3, Lewis sent an email giving a “green light” to delete another 15.2 million emails, according to claims by the plaintiffs, citing News Corp records.

It was only in March, after these deletions, that the company and the police reached an agreement. Going forward, detectives could ask the company to do key word and name searches, which would be handled by a third party, then filtered through the company to consider raising objections.

By April, the company had handed over just 54 emails, according to the plaintiffs’ filings.

It was around this time that Lewis became the primary point of contact for the police, helping solidify his reputation as a crucial cooperator. The Guardian newspaper, which broke open the phone hacking scandal, called him “News Corp’s cleanup campaigner.” Even Sue Akers, the head of the task force, would later say that the relationship with the company improved when Lewis arrived.

But the detectives closest to the case quickly came to doubt this new spirit of cooperation. As potential evidence began to be turned over under the new protocol, Detective Sgt. Wayne Harknett, a computer specialist, noticed something odd. Even given the deletions, “Emails which we had expected to find did not appear to be present,” he said in a previously unreported document.

And in a pair of interviews in the spring, investigators got a glimpse at just how many emails had been deleted — and from whose accounts.

First, a private computer consultant said that he’d been told by News International to remove emails, including from top executives, from the company server, according to a statement he gave the police. He said he warned the company that they might never be recoverable, and he was told to do it anyway.

Then, another outside tech consultant told the police that he had deleted the metadata — the sender, recipient, time and date — for millions of News International emails, according to Ratcliffe’s sworn statement.

That did not sound to the police like the routine computer modernization the company had described.

Both consultants separately told detectives that the deletions had occurred back in January, records show. The police were stunned. That meant that, during the crucial early period of the investigation, after Scotland Yard had first asked the company for evidence, News International was deleting data from its servers without mentioning it.

On June 23, the police caught a break, records show. In a meeting with Cheesbrough, yet another outside IT consultant weighed in — and dropped a bombshell.

He volunteered that, before the deletions began, he had backed up the company’s entire email system. Even emails predating 2008 should be recoverable.

“Mr. Cheesbrough appeared to be totally shocked by this development: it felt as though the cat had been let out of the bag,” Ratcliffe wrote of the encounter. “It was a jaw-dropping moment for most of the attendees at the meeting.”

A company spokesperson, speaking on behalf of Cheesbrough, acknowledged that it was “new news” to the company but disputed Cheesbrough’s expression.

Ratcliffe’s skepticism of News International deepened. He was particularly incensed to learn about the backups from an outside consultant, and not the company, according to his sworn statement.

“Whether NI itself knew of this backup and sought to hide it, or were simply unaware of what existed, either way, it was an unacceptable state of affairs,” Ratcliffe said.

•••

LEWIS’ EXPLANATION

On July 8, as technicians prepared to restore the lost emails using the newly discovered backup, the police held a tense meeting with Lewis and Cheesbrough.

The detectives confronted them about what the first IT consultant had said. Did the company really ask him to remove the emails of key executives from the servers?

Cheesbrough responded that some of the emails had been extracted and “purged” after the company learned of a security threat involving the former prime minister, Brown, minutes show.

“This has had an impact on our investigation,” Ratcliffe said, according to the minutes.

Had the company documented the threat?

Cheesbrough said it had not.

In November 2015, Scotland Yard shut down Operation Weeting. All told, some 30 million emails were deleted or lost from News International company servers. Using the consultant’s backup, tech specialists, with the company’s required help, recovered around two-thirds — but 10 million were gone.

Before shuttering the operation, the police passed what they had learned to the Crown Prosecution Service to decide whether to charge the company with a crime.

The prosecutors ultimately announced that they had considered bringing charges against News International in relation to, among other things, its email deletion policy. Prosecutors concluded that “there is no evidence to suggest the email deletion was undertaken in order to pervert the course of justice.”