[ISN] FBI expects Va. hacker probe to take two more weeks

http://www.timesdispatch.com/rtd/news/local/article/HACKGATER12_20090512-180002/267283/

By Tyler Whitley
Richmond Times-Dispatch
May 12, 2009

The FBI has not discovered the hacker who broke into the Department of 
Health Profession's computer, nor has it discovered what private 
information was retrieved, Virginia's Secretary of Health and Human 
Resources Marilyn B. Tavenner said today.

Questioned intensely by members of the House Appropriations Committee, 
Tavenner said the FBI thought it would take another two weeks to 
complete its investigation.

"They said it was like looking for a needle in the haystack, but they 
have ways to find the needle," she said.

Someone broke into the Department's database of addictive prescription 
drugs, such as oxycontin, morphine and Methadone. The data are kept to 
monitor who is using the drugs. The user's name and address, the date of 
birth and the substance are in the database.

The department recognized an unauthorized message posted on the Web site 
on April 30. The computer systems were shut down and state authorities 
were notified. All data had been properly backed up and back up files 
had been secured, Tavenner said.

Tavenner also said computer security at the department was judged to be 
among the top 5 percent of state computer systems. She acknowledged, 
however, that she knew of no other state where security had been 
breached.

[...]


--
LayerOne 2009, Information Security for the discerning professional. 
May 23-24 2009 @ The Anaheim Marriott in Anaheim, California 
Visit http://layerone.info for more information