Luke Rozniak: Pakistani IT Aides Made Unauthorized Access Into Congressional Servers in 2016, Accessing Information from Other Congressmen, and Covering Their Tracks

Nothing to see here.

House investigators concluded that Democratic IT aides made unauthorized access to congressional servers in 2016, allegedly accessing the data of members for whom they did not work, logging in as members of Congress themselves, and covering their tracks, according to a presentation summarizing the findings of a four-month internal probe.

Their behavior mirrored a "classic method for insiders to exfiltrate data from an organization," and they continued even after orders to stop, the briefing materials allege. There are indications that numerous members' data may have been secretly residing not on their designated servers, but instead aggregated onto one server, according to the briefing and other sources. Authorities said that the entire server was then physically stolen.

When acting on the findings, Democratic leadership appear to have misrepresented the issue to their own members as solely a matter of theft, a comparison of the investigators' findings with Democrats' recollections and a committee's public statement shows, leading 44 Democrats to not conduct protective measures typically taken after a breach -- including informing constituents whose personal information may have been exposed.

The presentation, written by the House's Office of the Inspector General, reported under the bold heading "UNAUTHORIZED ACCESS" that "5 shared employee system administrators have collectively logged into 15 member offices and the Democratic Caucus although they were not employed by the offices they accessed."

It found indications that a House "server is being used for nefarious purposes and elevated the risk that individuals could be reading and/or removing information" and "could be used to store documents taken from other offices." The server was that of the House Democratic Caucus, a sister group of the DNC that was run at the time by then-Rep. Xavier Becerra.

Read the whole thing.

posted by Ace at 07:47 PM

| Access Comments