Slashdot Mirror
Oklahoma Government Data Leak Exposes FBI Investigation Records, Millions of Department Files (zdnet.com)
An anonymous reader quotes a report from ZDNet: Researchers have disclosed the existence of a server exposed to the public which not only contained terabytes of confidential government data but information relating to FBI investigations. According to UpGuard cybersecurity researchers Greg Pollock and Chris Vickery, the open storage server belonged to the Oklahoma Department of Securities (ODS), a U.S. government department which deals with securities cases and complaints. The database was found through the Shodan search engine which registered the system as publicly accessible on November 30, 2018.
The UpGuard team stumbled across the database on December 7th and notified the department a day later after verifying what they were working with. To ODS' credit, the department removed public access to the server on the same day. In order to examine the security breach, the team was able to download the server's contents. The oldest records dated back to 1986 and the most recent was timestamped in 2016. In total, three terabytes of information representing millions of files. Contents ranged from personal data to system credentials and internal communication records. ODS said in a statement to ZDNet: "All state IP addresses, and many city and county addresses, are registered to OMES, but the agency has no visibility into the computer systems at the Oklahoma Department of Securities. For the past eight years the state has been working to consolidate all IT infrastructure under OMES and ODS had the option to consolidate its systems voluntarily and they did not."
The UpGuard team stumbled across the database on December 7th and notified the department a day later after verifying what they were working with. To ODS' credit, the department removed public access to the server on the same day. In order to examine the security breach, the team was able to download the server's contents. The oldest records dated back to 1986 and the most recent was timestamped in 2016. In total, three terabytes of information representing millions of files. Contents ranged from personal data to system credentials and internal communication records. ODS said in a statement to ZDNet: "All state IP addresses, and many city and county addresses, are registered to OMES, but the agency has no visibility into the computer systems at the Oklahoma Department of Securities. For the past eight years the state has been working to consolidate all IT infrastructure under OMES and ODS had the option to consolidate its systems voluntarily and they did not."
It's not going downhill here....not at all
nm
not worth a comment
LMAO
this is great
The USA fucks over other countries all the time. Keep sucking your own dick.
The comments below, yet more evidence that slashdot has gone to seed -SAD :]
Am I the only one who's shocked that the "government" of Oklahoma had terabytes of confidential government data to begin with? If you've ever been to Oklahoma, you know what I mean. I would have thought you could fit all the government data in Oklahoma on a couple of 1.44mb floppy disks.
You are welcome on my lawn.
Will someone please translate that official reply from ODS into plain English?
General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
You report that 'ODS said in a statement to ZDNet: "[...]For the past eight years the state has been working to consolidate all IT infrastructure under OMES and ODS had the option to consolidate its systems voluntarily and they did not."'
Which makes NO SENSE, why would ODS be criticizing itself. If you RTFA you'll see that it was **OMES** that said that.
Shut up, nazi.
The message above was brought to you by the Committee to Reelect Donald Trump in 2020.
Remember voters - Democrats are deranged, mean-spirited wingnuts whose idea of political debate is hurling childish insults. Compared to Democrats President Trump is grown up, kind hearted, and a serious intellectual.
Vote TRUMP in 2020 - for common decency!
is there anything in there that the Mueller investigation hasn't already leaked?
Not much, you?
Every CEO responsible for this mess along with all the shareholders should be fired or jailed.
This is exactly why capitalism should fail and we should only trust our data with the government. No company will chose security over profit.
Hopefully, this helps people wake up!
Those records could be very edifying to the public. I do understand that it might necessarily be a slow-ass I2P torrent, for legal reasons.
Don't tell what the US does, it's whataboutism /s.