US Federal Court Court IT Systems Breached

The US Congress has warned the American public that the federal justice system’s public document management system was compromised in a cyber attack. This attack on the US justice system has caused major problems with their public document management system and this was revealed recently at a hearing on oversight of the Justice Department and the dept says it is now investigating this data breach. 

The Chairman of the House Judiciary Committee Jerold Nadler went on record to confirm that three hostile actors had gained access to the Court Electronic Records and Case Management systems. This means that the criminals and hackers may have had access to documents across the US court system.

Nadler said that the document system had suffered from a system security failure, leading to the breach. At the hearing, it was revealed that the breach was first discovered in March, but occurred in early 2020. The breach could affect civil and criminal litigation that is pending.

Head of the Dept. of Justice (DoJ) National Security Division told the committee that the incident was first discovered in March and is a "significant concern," but and added that DoJ  “working very closely with the judicial conference and judges around the country to address the issue.”

Congressional lawmakers demanded answers from the Administrative Office of the US Courts (AOUSC) and Senator Ron Wyden has accused the judiciary of failing to modernize. “I write to express serious concerns that the federal judiciary has hidden from the American public and many members of Congress the serious national security consequences of the courts’ failure to protect sensitive data to which they have been entrusted.” 

A spokesperson for the AOUSC has admitted that “the Judiciary faces a significant threat to our electronic case management system.” He added  that sensitive court documents would now be stored in a “secure stand-alone computer system” and not uploaded to the public document management system.  

Congress.Gov:    Bloomberg:    Reuters:   TEISS:      Oodaloop:    Dark ReadingPolitico:    

Infosecurity Magazine:    Politico:  

You Might Also Read:

Confidential US Court Documents Published On The Dark Web:

 

« Taiwan's Government Websites Attacked Just Before Pelosi’s Visit
Hot Competition To Build 5G In India »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

Resecurity, Inc.

Resecurity, Inc.

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

Cyber Security Supplier Directory

Cyber Security Supplier Directory

Our Supplier Directory lists 6,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

ESET

ESET

ESET provide security software for enterprises and consumers - Antivirus Software, Internet Security and Virus Protection.

Information Security Forum (ISF)

Information Security Forum (ISF)

The ISF is a leading authority on information security and risk management.

Entrust

Entrust

Entrust is a global leader in digital security, identities, payments, and data protection.

Syhunt Security

Syhunt Security

Syhunt is a leading player in the web application security field, delivering its assessment tools to a range of organizations across the globe.

Oneconsult

Oneconsult

Oneconsult provides cyber security services focusing on penetration tests / ethical hacking, ISO 27001 security audits and incident response & IT forensics.

Honeywell Process Solutions (HPS)

Honeywell Process Solutions (HPS)

Honeywell's Industrial Cyber Security Solutions help plants and critical infrastructure sectors defend the availability, reliability and safety of their industrial control systems.

GuardRails

GuardRails

GuardRails provides continuous security feedback that empowers developers to find, fix, and prevent vulnerabilities.

Lumu Technologies

Lumu Technologies

Lumu is a cybersecurity company that illuminates threats and attacks affecting enterprises worldwide.

RIA in a Box

RIA in a Box

MyRIACompliance combines our team of RIA compliance experts with an online software platform to help investment advisers better manage regulatory compliance and cybersecurity responsibilities.

EVOKE

EVOKE

EVOKE is an award-winning Digital Transformation company that partners with its clients to build digital workplace solutions for organizational challenges.

Security Risk Management (SRM)

Security Risk Management (SRM)

SRM provide a comprehensive security risk management service encompassing people, processes, technology, governance, compliance and risk management.

Armolon

Armolon

Armolon provides comprehensive data breach and cybersecurity, as well cybersecurity audits and certifications, and disaster recovery/business continuity services to clients.

Descope

Descope

Descope is a service that helps every developer build secure, frictionless authentication and user journeys for any application.

DarkFeed

DarkFeed

DarkFeed is a Threat Intelligence provider that monitors the darknet in real-time, where hackers and Cyber criminals are most active.

ZoobeTek

ZoobeTek

ZoobeTek are a company focused on preventing leaks related to the security of business information3.

RIoT Secure

RIoT Secure

RIoT Secure AB is a technology enabler within the IoT industry - created with a vision to ensure security technology exists in the foundations of software development for IoT solutions.