Well, the computers sending out their tweets were tracked to Palo Alto, California.
However, their "request-a-hack" hotline had the area code for the Columbus, Ohio metropolitan area.
So, :shrug:
Thanks
Both phones and internet can be bounced around and redirected. Couple that with the fact that different members probably run those different services and live in very different locations, and that evidence amounts to very little until they can be traced to their origins. I wouldn't be surprised if their Twitter account was accessed through 7 proxies. In fact, I'd be surprised if it wasn't.
The key to actually finding the whole group is to catch a few members and then make them talk. Otherwise, you'll only manage to make a few arrests, they have little jail time, and the other members of the group drop off the face of the earth until everyone forgets about them. At that point I suspect the members among them who do all the hacking will turn into what LulzSec stated that they were attempting to warn us against, the hackers who fish through your data without anyone noticing a thing. The others, i.e. the vocal ones who aren't hackers, will probably regroup as Anonymous and continue trying to further their own agenda, because the LulzSec name is too obvious and Anonymous has power in numbers.
Though I hate to suggest that the authorities act on a whim, they really need to be fast when it comes to their actions, not deliberate. Evidence can be disposed of rather easily on a computer, a lot of time is wasted tracking people down, and you can't give them time to anticipate your arrival, otherwise it becomes much harder to actually convict them. A lot of controversy was generated during the FBI raids on members of Anonymous who participated in the DDoS spree in defense of Wikileaks, but it was rather effective and unexpected. They managed to catch many people involved, and the suddenness of it prevented them from disposing of evidence, which two members in particular outright claimed they would do if they had enough time.
They have at least 1 member of LulzSec in custody at the present. Like it was suspected, they are active in Britain. On the American side, they need to work with the British officials to track and find the remaining members who are undoubtedly in both countries
at least. There are probably more all over Europe and possibly in Canada. I'd guess maybe there could be more in some tiny out-of-the-way country of no significance, but I think it'd be a waste of time trying to find them in nations that don't even have extradition treaties with the US. As a result of these hacks, there will probably be a political call to pass more legislation that would create a tighter, less private internet. Everyone suffers in the end I guess. In my opinion, the only legislation that needs to be passed is an international organization tasked with tracking internet criminals worldwide, rather than leaving it up to each independent nation to handle by themselves.