DPS, victim of cyber attack, to seek federal and state charges against hackers

PRESS RELEASES

DPS response to news that Cyber hackers LulzSec are disbanding

Monday, June 27, 2011 -

While the Department noted that LulzSec has decided to disband, it does not diminish the intrusion into the privacy of our officers and the release of sensitive information. Nor does this relieve them of their criminal responsibility which may include both Federal and State Charges.

The week of June 20, 2011, the Arizona Department of Public Safety became aware that their email system had been compromised by a known cyber terrorism group, known as LulzSec. The group appears to have gained access to the email accounts of at least seven DPS employees. The cyber terrorism group has posted the stolen information on their website. Law Enforcement agencies are working to identify the source of the cyber-attack and have initiated a joint criminal investigation.

There is no evidence the attack has breached the servers or computer systems of DPS, nor the larger state network. Likewise, there is no evidence that DPS records related to ongoing investigations or other sensitive matters have been compromised.

Upon learning that a limited number of agency e-mails had been disclosed, DPS took action. In addition to contacting other law enforcement agencies, the Arizona Counter Terrorism Information Center (ACTIC) has been activated. Remote e-mail access for DPS employees remains frozen for the time-being. The security of the seven DPS officers in question remains the agency’s top priority and, since a limited amount of personal information was publicly disclosed as part of this breach. Steps are being taken to ensure the officers’ safety and that of their families.

In the meantime, safeguards are in place at DPS and other state agencies to ensure the security of electronic and computerized records. These safeguards include:

- 24/7 monitoring of the state’s Internet gateway.

- Industry-standard firewalls, anti-virus software and other capabilities.

- IT security staff employed at each major state agency.

- Close coordination between the State of Arizona and state, federal and private-sector authorities regarding cyber-security issues.