City Servers Hacked

[patric]

City of Tulsa authorities have learned information on one of the city's computer servers was targeted by an unknown source.

Technology officers with the City have taken the websites temporarily offline while they work to identify the extent and nature of the incident.

http://www.fox23.com/news/local/story/City-of-Tulsa-websites-down-after-server-attack/73fGp6PGBkilHVWT1b0hYw.cspx

[sgrizzle]

City of Tulsa authorities have learned information on one of the city's computer servers was targeted by an unknown source.

Technology officers with the City have taken the websites temporarily offline while they work to identify the extent and nature of the incident.

http://www.fox23.com/news/local/story/City-of-Tulsa-websites-down-after-server-attack/73fGp6PGBkilHVWT1b0hYw.cspx

In other news, City of Tulsa Technology Officers blissfully unaware of attacks during other 364 days of the year.

P.S. Quit using IIS

[Hoss]

In other news, City of Tulsa Technology Officers blissfully unaware of attacks during other 364 days of the year.

P.S. Quit using IIS

Apache fanboi

[Townsend]

Apache fanboi

Ehneek chok

[sgrizzle]

It appears from the time the city's websites have been down

1. They weren't just targeted, they were completely hacked
2. They don't have good backups

[nathanm]

Or they just haven't figured out the attack vector yet.

[Gaspar]

In other news, City of Tulsa Technology Officers blissfully unaware of attacks during other 364 days of the year.

P.S. Quit using IIS

+1

[Townsend]

City of Tulsa residents notified by letter of website hacking threat to personal information

http://www.kjrh.com/dpp/news/local_news/city-of-tulsa-residents-notified-by-letter-of-website-hacking-threat-to-personal-information

TULSA - A week after the City of Tulsa's website was hacked, city officials are notifying residents of the potential threat to their personal information.

There was an attempt to access one of the city's computer servers, which hosts the city's website.

Officials say the investigation thus far indicates attempts to access data were "most likely unsuccessful," though the city took the site offline as a precaution while the investigation was launched.

Letters were mailed Tuesday to all individuals whose information was potentially accessed.  These people including online job applicants and citizens who reported crimes to the police department through the website.

The letters contain Web links and information to credit monitoring agencies and consumer protection information.

City officials have established a resource center to take calls and respond to email to those who received the letters.

"Like numerous cities across the country, the City of Tulsa experiences and successfully repels attempts to access IT infrastructure every day," read the statement.  "The City of Tulsa IT officials regret the inconvenience this may cause and they are implementing a comprehensive assessment of the City servers and IT infrastructure to prevent unauthorized access and to restore the full website."

A criminal investigation is under way and during the extent of the investigation officials say no other details will be made available.


Read more: http://www.kjrh.com/dpp/news/local_news/city-of-tulsa-residents-notified-by-letter-of-website-hacking-threat-to-personal-information#ixzz26vxeLa3R

[nathanm]

Most likely? Did they not have centralized logging or something?

[patric]

Most likely? Did they not have centralized logging or something?

Seems the city may have been bleeding data, despite assurances to the contrary.  

Those potentially affected include online job applicants and residents who reported crimes to the police through the city's website in the last 10 years.

[JCnOwasso]

I received a letter.  Because I submitted a resume about 6 years ago.

[sgrizzle]

I received a letter.  Because I submitted a resume about 6 years ago.

Serves you right.

[carltonplace]

I received a letter.  Because I submitted a resume about 6 years ago.

Sounds like they need a new server admin. You might get an offer in the next ten years if you aren't qualified or are a friend of the mayor.

[rdj]

The city website is still down.  What the heck?

[Hoss]

Sounds like they need a new server admin. You might get an offer in the next ten years if you aren't qualified or are a friend of the mayor.

Or, if you can prove that your cellphone can spontaneously combust...