Sheriff's Online Database Leaks Info On Informants

Tootech writes with this snippet from NPR: "A Colorado sheriff's online database mistakenly revealed the identities of confidential drug informants and listed phone numbers, addresses and Social Security numbers of suspects, victims and others interviewed during criminal investigations, authorities said. The breach potentially affects some 200,000 people, and Mesa County sheriff's deputies have been sifting through the database to determine who, if anyone, is in jeopardy. ... The FBI and Google Inc. are trying to determine who accessed the database, the sheriff said. Their concern: That someone may have copied it and could post it, WikiLeaks-style, on the Internet. 'The truth is, once it's been out there and on the Internet and copied, you're never going to regain total control,' Hilkey said. Thousands of pages of confidential information were vulnerable from April until Nov. 24, when someone notified authorities after finding their name on the Internet. Officials said the database was accessed from within the United States, as well as outside the country, before it was removed from the server."

Comments

What if

[MrMarkie]

What if they didn't put that database on a server facing the internet? Could that be a good idea? Or maybe they should just return all their computers since they can't be trusted to use them securely... Let the flames begin.

Re:What if

[GaryOlson]

What if annual security training was mandatory for all the IT staff connected with law enforcement IT equipment -- just like weapons training is mandatory for all law enforcement officers. This includes the CIO [if they have one], the city manager, the systems architect [whichever poor IT technician is erroneously saddled with this responsibility], and all law enforcement officers who access this data. Failure to pass security training and any breach of security by any individual would initiate immediate administrative leave and/or an Internal Affairs or FBI investigation.

Certain data is a lethal weapon and should be treated appropriately.

This isn't a leak.

[El Neepo]

The article makes this situation comparable to the current wikileaks situation, which it isn't.

Some IT person left the data freely accessible on the internet and eventually a crawler found it. They're guessing it was a malicious person but in all odds it is not.

This is just another IT mistake not an act of whistleblowing or terrorism or something else the government wants to make illegal.

Re:Donutleaks strikes again!

[mcgrew]

They are terrorists!

If you're referring to to the informants, IMO they are the terrorists. Most of the societal problems attributed to drugs are, in fact, caused by the laws against them.

It's easier for a teenager to buy pot than it is for an adult. One slashdot wag's sig reads "thanks to the war on drugs, it's easier to buy meth than it is to buy cough syrup."

One would think that alcohol prohibition would have taught us that such laws are incredibly harmful.

The only segment of society that benefits from anti-drug laws are the smugglers and dealers, which tell you who's funding the anti-drug lobby.

Re:Donutleaks strikes again!

[Pojut]

The only segment of society that benefits from anti-drug laws are the smugglers and dealers, which tell you who's funding the anti-drug lobby.

You forget pharmaceutical companies (hemp and marijuana would have a major impact on their bottom line for a lot of old standbys), so-called "rehab centers", and, let's not forget, our privately-owned prisons.

Re:Donutleaks strikes again!

[Asclepius99]

And don't forget companies that sell alcohol. I mean, why would you let someone take away your government monopoly on legal substance abuse?