By Dan Goodin in San Francisco
8th November 2008
A former prison inmate has been arrested and charged with hacking the
facility's computer network, stealing personal details of more than
1,100 prison employees and making them available to fellow inmates.
Francis G. Janosko, 42, gained access to the names, addresses, dates of
birth, social security numbers and telephone numbers of employees
working for the Plymouth County Correctional Facility in Massachusetts,
according to an indictment unsealed Wednesday in US District Court in
Boston. Using a thin client that was connected to a prison server, the
prisoner was able to access an employee database by exploiting a bug in
legal research software made available to inmates.
Once he obtained the personal information of the employees, he made it
accessible to other inmates. Janosko also managed to obtain the username
and password to a prison management program, and to access the internet
to download videos and digital photographs of prison employees, inmates
and aerial shots of the prison. The accused hacking took place between
October 2006 and February 2007.
Visit the InfoSec News Security Bookstore
Best Selling Security Books and More!