DPS response to recent cyber attack

[InfoSec News <alerts () infosecnews org>]

http://www.kvoa.com/news/dps-response-to-recent-cyber-attack/

KVOA.com
June 27, 2011

ARIZONA - The Arizona Department of Public Safety released the following 
statement Monday regarding the recent cyber attack on the department's 
computer system.

DPS Statement:

The week of June 20, 2011, the Arizona Department of Public Safety 
became aware that their email system had been compromised by a known 
cyber terrorism group, known as LulzSec.

The group appears to have gained access to the email accounts of at 
least seven DPS employees. The cyber terrorism group has posted the 
stolen information on their website. Law Enforcement agencies are 
working to identify the source of the cyber-attack and have initiated a 
joint criminal investigation.

There is no evidence the attack has breached the servers or computer 
systems of DPS, nor the larger state network. Likewise, there is no 
evidence that DPS records related to ongoing investigations or other 
sensitive matters have been compromised.

Upon learning that a limited number of agency e-mails had been 
disclosed, DPS took action. In addition to contacting other law 
enforcement agencies, the Arizona Counter Terrorism Information Center 
(ACTIC) has been activated. Remote e-mail access for DPS employees 
remains frozen for the time-being.

The security of the seven DPS officers in question remains the agency's 
top priority and, since a limited amount of personal information was 
publicly disclosed as part of this breach. Steps are being taken to 
ensure the officers' safety and that of their families.

In the meantime, safeguards are in place at DPS and other state agencies 
to ensure the security of electronic and computerized records. These 
safeguards include:

- 24/7 monitoring of the state's Internet gateway.

- Industry-standard firewalls, anti-virus software and other
  capabilities.

- IT security staff employed at each major state agency.

- Close coordination between the State of Arizona and state, federal
  and private-sector authorities regarding cyber-security issues.

While the Department noted that LulzSec has decided to disband, it does 
not diminish the intrusion into the privacy of our officers and the 
release of sensitive information. Nor does this relieve them of their 
criminal responsibility which may include both Federal and State 
Charges.


___________________________________________________________
Tegatai Managed Colocation: Four Provider Blended
Tier-1 Bandwidth, Fortinet Universal Threat Management,
Natural Disaster Avoidance, Always-On Power Delivery
Network, Cisco Switches, SAS 70 Type II Datacenter.
Find peace of mind, Defend your Critical Infrastructure.
http://www.tegataiphoenix.com/