Brand new Utah IT director shows failings that aided internet attack

@@@@@ Ut state information had not been encrypted and failed to have hardened security passwords.

@@@@@ Talking with Deseret Information, Sophie Fletcher â€" who had been director from the US state's Section of Technology Providers, until having been asked to decide last Tuesday â€" mentioned that there have been a "huge embrace the amount of attacks towards state systems", particularly by 600 % in past times four weeks.

@@@@@ Their replacement, Indicate VanOrden, said several human mistake was to to take responsiblity for the health info of nearly eight hundred, 000 Utah residents falling into untrusted fingers, but admitted it turned out difficult to expect employees in order to memorise at least hundred pages of plan.

@@@@@ He or she said that Utah's Medical planning Management Information System had not been protected with a firewall when it was upgrading around the date when cyber-terrorist first gained entry to the machine. VanOrden also mentioned that a process to make sure that new machines are monitored and also a risk assessment carried out prior to use had not been implemented.

@@@@@ “Ninety-nine % of the state's information is behind 2 firewalls, these details had not been. It had been not encrypted and it also did not possess hardened security passwords, ” VanOrden stated.

@@@@@ VanOrden stated he will tighten protection among personnel, such as the use of any checklist for every time a big change is built to information saved on some of the state's two, 000 machines, and immediate end of contract for anyone who has access to information not pertinent for their work.

@@@@@ Upon 30March, attackers started siphoning what they are called, details, birth dates along with other personal information associated with 500, 000 Ut residents. The assailants were also in a position to exfiltrate that information and the social protection amounts of 280, 000 extra occup ants.