Information Security News mailing list archives
Inmate hacked prison network, broke into employee database
From: InfoSec News <alerts () infosecnews org>
Date: Mon, 10 Nov 2008 02:43:30 -0600 (CST)
http://www.theregister.co.uk/2008/11/08/prison_network_hacked/ By Dan Goodin in San Francisco The Register 8th November 2008 A former prison inmate has been arrested and charged with hacking the facility's computer network, stealing personal details of more than 1,100 prison employees and making them available to fellow inmates. Francis G. Janosko, 42, gained access to the names, addresses, dates of birth, social security numbers and telephone numbers of employees working for the Plymouth County Correctional Facility in Massachusetts, according to an indictment unsealed Wednesday in US District Court in Boston. Using a thin client that was connected to a prison server, the prisoner was able to access an employee database by exploiting a bug in legal research software made available to inmates. Once he obtained the personal information of the employees, he made it accessible to other inmates. Janosko also managed to obtain the username and password to a prison management program, and to access the internet to download videos and digital photographs of prison employees, inmates and aerial shots of the prison. The accused hacking took place between October 2006 and February 2007. [...] ______________________________________________ Visit the InfoSec News Security Bookstore Best Selling Security Books and More! http://www.shopinfosecnews.org
Current thread:
- Inmate hacked prison network, broke into employee database InfoSec News (Nov 10)