Post #2113060

2025-08-12 23:13 UTC

So yesterday, I emailed a state court system that appears to be linked to the exposed data I mentioned recently and that the host notified on or about July 28. No reply was received. Today, I sent a contact form message to the lawyer for a juvenile whose records were sealed. Sealed, except 11 of them were exposed to anyone who can access the data. I told him what was going on and suggested he contact the court and tell them to get the data secured. No reply was received. Today, I sent an email to the judge who ordered the juvenile's records sealed and I cc:d the district attorney. I gave them the juvenile's name, case number and that I could see all the sealed records. I urged them to have their IT or vendor call me and I could give them the IP address over the phone, etc. No reply was received. Dear Russia, China, and North Korea: You do not need to hack our courts. They are leaking like sieves and do not respond when we try to tell them they need to secure the data. Yours in total frustration, /Dissent #infosec #cybersecurity #incident_response #dataleak #databreach #WAKETHEFUCKUP

Replies (4)

@Rastal@mastodon.social 2025-08-13 08:45

@PogoWasRight@infosec.exchange I'm 100% sure Russia, China and North Korea already know just how leaky our public sector organisations are.

Open ##2867995
@masek@infosec.exchange 2025-08-13 13:50

@PogoWasRight@infosec.exchange As long as we don't have a central authority per country that takes care of such things, this will rather be the norm than the exception. We spend billions on IT security, but refuse to spend a few millions on a process that will improve security a lot.

Open ##2867997
@mweiss@infosec.exchange 2025-08-13 15:33

@PogoWasRight@infosec.exchange you're seeing the results of the moral hazard that comes when the consequences of poor security decisions are not borne by those who make them.

Open ##2867998
@funguy2playwith@mastodon.online 2025-09-06 07:27

@PogoWasRight@infosec.exchange I had a similar experience with FPL, Florida Power and Lights. Sent them the evidence and got a reply telling *me* I should clear my browser cache. I even called them, spoke to several managers and they were all F'ing clueless. It was very frustrating and extremely scary.

Open ##2867999