US Federal Court Court IT Systems Breached

The US Congress has warned the American public that the federal justice system’s public document management system was compromised in a cyber attack. This attack on the US justice system has caused major problems with their public document management system and this was revealed recently at a hearing on oversight of the Justice Department and the dept says it is now investigating this data breach. 

The Chairman of the House Judiciary Committee Jerold Nadler went on record to confirm that three hostile actors had gained access to the Court Electronic Records and Case Management systems. This means that the criminals and hackers may have had access to documents across the US court system.

Nadler said that the document system had suffered from a system security failure, leading to the breach. At the hearing, it was revealed that the breach was first discovered in March, but occurred in early 2020. The breach could affect civil and criminal litigation that is pending.

Head of the Dept. of Justice (DoJ) National Security Division told the committee that the incident was first discovered in March and is a "significant concern," but and added that DoJ  “working very closely with the judicial conference and judges around the country to address the issue.”

Congressional lawmakers demanded answers from the Administrative Office of the US Courts (AOUSC) and Senator Ron Wyden has accused the judiciary of failing to modernize. “I write to express serious concerns that the federal judiciary has hidden from the American public and many members of Congress the serious national security consequences of the courts’ failure to protect sensitive data to which they have been entrusted.” 

A spokesperson for the AOUSC has admitted that “the Judiciary faces a significant threat to our electronic case management system.” He added  that sensitive court documents would now be stored in a “secure stand-alone computer system” and not uploaded to the public document management system.  

Congress.Gov:    Bloomberg:    Reuters:   TEISS:      Oodaloop:    Dark ReadingPolitico:    

Infosecurity Magazine:    Politico:  

You Might Also Read:

Confidential US Court Documents Published On The Dark Web:

 

« Taiwan's Government Websites Attacked Just Before Pelosi’s Visit
Hot Competition To Build 5G In India »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

Resecurity

Resecurity

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

Digital Arts

Digital Arts

Digital Arts provides internet security software and appliance products for companies and individuals.

Devel

Devel

Devel is a LATAM cybersecurity company specialized in providing red, blue and purple team services for the financial sector.

Baffin Bay Networks

Baffin Bay Networks

Baffin Bay Networks operates globally distributed Threat Protection Centers™, offering DDoS protection, Web Application Protection and Threat Inspection.

Cofrac

Cofrac

Cofrac is the national accreditation body for France. The directory of members provides details of organisations offering certification services for ISO 27001.

Asia Data Destruction (ADD)

Asia Data Destruction (ADD)

ADD is the leading IT Assets Disposal and Data Destruction Company in Thailand.

Cyber Security & Cloud Expo

Cyber Security & Cloud Expo

The Cyber Security & Cloud Expo is an international event series in London, Amsterdam and Silicon Valley.

Talon Cyber Security

Talon Cyber Security

Talon delivers the leading enterprise browser designed to bring security to managed and unmanaged devices, regardless of location, device type or operating system.

Digitale Gründerinitiative Oberpfalz (DGO)

Digitale Gründerinitiative Oberpfalz (DGO)

Digital Founder Initiative Oberpfalz's goal is to build a sustainable start-up culture in the field of digitization throughout the Upper Palatinate district of Bavaria.

Cyber Coaching

Cyber Coaching

Cyber Coaching is a community for enhancing technical cyber skills, through unofficial certification training, cyber mentorship, and personalised occupational transition programs.

Guardio

Guardio

Guardio develop tools and products to combat modern web and browser threats.

SNC-Lavalin

SNC-Lavalin

SNC-Lavalin is a fully integrated professional services and project management company with offices around the world.

Gilsbar

Gilsbar

For more than half a century, Gilsbar has offered insurance service solutions and support for businesses and their employees.

Munio

Munio

Munio is a leading Fortified IT Support and Cyber Security companies in the south east of the UK.

CloudDefense.AI

CloudDefense.AI

CloudDefense.AI is an industry-leading multi-layered Cloud Native Application and Protection Platform (CNAPP) that safeguards your cloud infrastructure and cloud-native apps,

Telenor Cyberdefence

Telenor Cyberdefence

Telenor Cyberdefence is a newly established (2024) cloud-born Managed Security Service Provider focused on the Nordic markets.

TeamSystem

TeamSystem

TeamSystem is a leading tech company in the market for digital business management solutions for companies and professionals.