Bowie IT employee resigns amid city network security breach

[InfoSec News <alerts () infosecnews org>]

http://www.gazette.net/stories/062608/bowinew173015_32357.shtml

By Andrea Noble 
Staff Writer
Gazette.net
June 26, 2008

A computer support specialist has resigned from Bowie city staff after a 
password recording program that was accessing one of the city's servers 
was found on his work computer, city officials said.

Timothy Nagel resigned from his position in early June, confirmed 
Personnel Officer John Clinton. The "password sniffer" he allegedly used 
was detected during a routine network security sweep in late May, said 
Information Technology Director Robert Boller. The program collected and 
stored password information entered into the City Hall computers from 
one network server. Neither the network server that hosts the Bowie 
Police Department nor the Web server, where residents can pay bills 
online, were compromised, Boller said.

"It was all internal," Boller said. "Our gateway to the public was not 
involved."

However, all city staff were advised to change their city network and 
private account passwords.

[...]


_______________________________________________      
Attend Black Hat USA, August 2-7 in Las Vegas, 
the world's premier technical event for ICT security experts.
Featuring 40 hands-on training courses and 80 Briefings 
presentations with lots of new content and new tools.
Network with 4,000 delegates from 50 nations.  
Visit product displays by 30 top sponsors in 
a relaxed setting. http://www.blackhat.com