[ISN] Inmate hacked prison network, broke into employee database

http://www.theregister.co.uk/2008/11/08/prison_network_hacked/

By Dan Goodin in San Francisco
The Register
8th November 2008 

A former prison inmate has been arrested and charged with hacking the 
facility's computer network, stealing personal details of more than 
1,100 prison employees and making them available to fellow inmates.

Francis G. Janosko, 42, gained access to the names, addresses, dates of 
birth, social security numbers and telephone numbers of employees 
working for the Plymouth County Correctional Facility in Massachusetts, 
according to an indictment unsealed Wednesday in US District Court in 
Boston. Using a thin client that was connected to a prison server, the 
prisoner was able to access an employee database by exploiting a bug in 
legal research software made available to inmates.

Once he obtained the personal information of the employees, he made it 
accessible to other inmates. Janosko also managed to obtain the username 
and password to a prison management program, and to access the internet 
to download videos and digital photographs of prison employees, inmates 
and aerial shots of the prison. The accused hacking took place between 
October 2006 and February 2007.

[...]


______________________________________________      
Visit the InfoSec News Security Bookstore
Best Selling Security Books and More!
http://www.shopinfosecnews.org