Ransomware Attack on GEO Group Exposes Sensitive Information
by Matt Clarke
On November 3, 2020, the GEO Group, one of the largest private prison companies in the nation, revealed that it had suffered a ransomware attack in August of that year that exposed sensitive personal information of employees, immigrant detainees and prisoners.
GEO said it was sending data-breach notification letters to all affected individuals, but the company was unaware of any fraud or misuse of the information.
GEO owns or operates 123 facilities with a total of around 93,000 beds and about 23,000 employees in the U.S., U.K. and South Africa.
In a ransomware attack, criminal hackers penetrate a computer system and encrypt vital data. The system’s user is then offered the encryption key in exchange for payment, generally using Bitcoin or another cryptocurrency.
The ransomware attack on GEO compromised data for prisoners at South Bay Correctional and Rehabilitation Facility in Florida, a Pennsylvania youth facility and a now-closed facility in California, as well as employee data on two corporate servers.
The data include medical treatment information, which is private under federal law, and information that could be used in identity theft such as name, date of birth, and Social Security number. GEO worked with law enforcement and cybersecurity firms to investigate the attack.
In a document filed with the U.S. Securities and Exchange Commission, GEO said it was able to recover “critical operating data,” but did not explain whether this involved paying a ransom or the use of backup files. Also unexplained was why GEO waited 76 days to inform people that their data had been compromised.
Sources: eandt.thejet.org, dataprivacyandsecurityinsider.com
As a digital subscriber to Prison Legal News, you can access full text and downloads for this and other premium content.
Already a subscriber? Login
More from this issue:
- Jail Suicides in Massachusetts Point to National Crisis: Challenging Legislatures to Say Not One More, by Jennifer Honig
- Government Refuses to Follow Federal Court’s Discovery Order After Being Caught Recording Attorney Meetings with Prisoners at Leavenworth, by Dale Chappell
- From the Editor, by Paul Wright
- Mississippi Joins Illinois and Few Other States Prioritizing Vaccination of State Prisoners to Slow Spread of COVID-19, by Derek Gilna
- Pandemic Medical Update: “Herd Immunity” at Prisons?, by Michael D. Cohen, MD
- Texas Winter Storm Freezes Plumbing, Power and Prisoners, by Matthew Clarke
- Massachusetts Governor Ends Good Time Offer for Prisoners Taking COVID-19 Vaccine, by David Reutter
- Connecticut Lawmakers Refuse to Address Corrections Issues During Pandemic, by Anthony Accurso
- Confidential Settlement in Case Involving Alleged Pattern of Racist Misconduct in Michigan Prisons, by Casey Bastian
- California Trans Women Struggle For Protection Under Prison Rape Elimination Act, by Edward Lyon
- Oklahoma Prisoners Call for Better Nutrition, by Kevin Bliss
- Florida Jail Administrators Fired After Woman Gives Birth in Cell, by Daniel A. Rosen
- Holiday Cards for Prisoners: Let’s End Collective Punishment in U.S. Prisons, by Sandy Rozek
- Virginia Settles Two Lawsuits Over Misuse of Solitary Confinement, by Daniel A. Rosen
- COVID-19 Inspired Ban on Prison Visits in Texas Ends, by Chad Marks
- Activist, Political Prisoner, and Journalist Mumia Abu-Jamal Diagnosed With COVID-19, Energizing Calls for His Release, by Juliette LaMarr
- COVID-19 Pandemic Makes Job Hunting Especially Difficult for Ex-Offenders, by Kevin Bliss
- U.S. Sues Alabama Over Prison Conditions, by David Reutter
- Florida Prison Guard Indicted in Prisoner Death by Blunt Force Trauma, by David Reutter
- Michigan Begins Video Visits During Coronavirus Pandemic, by David Reutter
- Hawaii Fails to Provide Video of Two Prison Disturbances, by Edward Lyon
- California Prison Factories Fined For Exposing Unwitting Workers to COVID-19, by Mark Wilson
- Sixth Circuit Upholds Prisoner’s 18 U.S.C. § 111 Conviction for Assaulting Federally Contracted Private Prison Guard, by Matthew Clarke
- "Conservative New York County Enacts Progressive Transgender Prisoner Policy", by Mark Wilson
- COVID-19 Depletes State Prison Staffs Nationwide, Forcing Consolidation of Facilities and Increasing Risk to All, by Derek Gilna
- After 36 Years in a Louisiana Prison for a Rape He Didn’t Commit, Archie Williams Wins Freedom — and a TV Show Spotlight, by Casey Bastian
- COVID-19 Continues Rampage Through Pennsylvania State Prisons, by Derek Gilna
- $105,000 Settlement in Wisconsin Prisoner’s Excessive Force Claim, by David Reutter
- Alabama Jails and Prisoners Swamped With COVID-Related Problems, by Daniel A. Rosen
- How States Exclude People With Criminal Records From Jury Service, by Dale Chappell
- Study Shows Misaligned Economic Incentives Fuel Mass Incarceration, by Matthew Clarke
- California Enacts Legislation Strengthening Protections for LGBTQ Prisoners, by Matthew Clarke
- Baltimore Demolishes Maryland’s Oldest Penitentiary, Burying Its Nostalgia And Nightmares, by Michael Fortino, Ph.D
- Books: “Let The Lord Sort Them: The Rise and Fall of the Death Penalty”, by Robert Dunham
- Florida Senator Wants to Keep Ex-Prisoners from Earning the $15 Minimum Wage Increase, by Kevin Bliss
- Former Prisoner Becomes Activist for LBGTQ Rights in California Prisons
- Parnall Correctional Facility in Michigan Copes with Scabies Outbreak, by Kevin Bliss
- Fourth Circuit: Deaf North Carolina Prisoner Should be Allowed Direct Videophone Calls to Communicate with Deaf Community, by David Reutter
- People in jails are using more phone minutes during the COVID-19 pandemic, despite decreased jail populations, by Andrea Fenster
- Ransomware Attack on GEO Group Exposes Sensitive Information, by Matthew Clarke
- Hundreds of Virginia Inmates Await Parole Consideration Under New Law, by Daniel A. Rosen
- Colorado’s Governor Bows to Pressure in Denying State Prisoners Priority COVID-19 Vaccinations, by Derek Gilna
- More Than 40 Immigrants Have Died in ICE Custody, by Anthony Accurso
- Experts Divided on Drug Court Effectiveness, by Kevin Bliss
- Secrecy Surrounded Flurry of Late-Term Federal Executions Under Donald Trump, by Derek Gilna
- New Advocacy Group for New Mexico Prisoners Created, by Dale Chappell
- Vermont Prisoner’s Death Under Investigation: Did Implicit Bias Play Role?, by Kevin Bliss
- News in Brief
More from Matthew Clarke:
- Forensic Genetic Genealogy: Police Are Searching Genetic Genealogy Companies’ Databases Regardless of Whether They Have Permission, Dec. 1, 2024
- U.S. Sentencing Commission Publishes Data Report on Compassionate Release in FY 2023, Oct. 1, 2024
- Fourth Circuit Vacates Order Denying § 2254 Motion, Remands for Evidentiary Hearing on Whether Counsel’s Failure to Object to Duplicative Drug Conspiracy Counts in Violation of Double Jeopardy Clause Was Strategic, Oct. 1, 2024
- Rhode Island Supreme Court Holds Temporal Requirement of ‘Recent Fabrication’ Exception to Hearsay Rule Not Satisfied and Scribbled Note Made by Child Victim of Sexual Abuse Years After Alleged Events Not ‘Excited Utterance’, Oct. 1, 2024
- Virginia Governor’s Veto Exposes Prisoners Who Took Plea Bargains to Civil Rights Violations, Sept. 15, 2024
- Law Review Article Reports Metadata on Victims of Coercive Plea Bargaining, Sept. 1, 2024
- California Court of Appeal Announces Correct Legal Standard for Whether Dismissal of Sentence Enhancement Would ‘Endanger Public Safety’ Under § 1385(c)(2) Is Dangerousness at Time of Future Release, Not at Time of Resentencing Under SB 1393, Sept. 1, 2024
- New Mexico Supreme Court Holds Double Jeopardy Applies When Prosecutor’s Misconduct Willfully Disregarded Resulting Mistrial, Sept. 1, 2024
- After Spike in Jail Deaths, Riverside County Sheriff’s Department Under California Department of Justice Investigation, Aug. 15, 2024
- $7.5 Million Settlement in Suit Over California Jail Death, Aug. 15, 2024
More from these topics:
- Centurion’s $8 Million Track Record of Abuse and Neglect as New Mexico’s Correctional Medical Provider, Dec. 9, 2024. Centurion, Systemic Medical Neglect, Private Contractors, Settlements, Medical Neglect/Malpractice.
- Turn Key Health Clinics: Another Private Jail Medical Provider Leaving a Trail of Death and Misery, Sept. 15, 2024. Private Contractors, Medical Neglect/Malpractice.
- Virginia Takes Back One Prison from GEO Group, Closes Four More, Aug. 15, 2024. Private Prisons, GEO Group/Wackenhut.
- Riot at California GEO Group Lockup Sends Message to U.S. Marshals, Aug. 15, 2024. GEO Group/Wackenhut, Protests.
- Psychiatrist Settles Virginia Jail Suicide Suit for $1.75 Million, Aug. 15, 2024. Private Contractors, Settlements, Failure to Treat (Mental Illness), Suicides.
- No Dismissal for San Diego Jail Medical Contractor from Suit Filed Over Detainee’s Withdrawal Death, Aug. 15, 2024. Drug/Alcohol Withdrawal, Private Contractors, Drug Overdose, Medical Neglect/Malpractice, Dismissal.
- $7 Million Settlement for Mentally Ill Detainee’s Death in California’s Santa Rita Jail, June 1, 2024. Medication, Private Contractors, Medical Neglect/Malpractice, Failure to Treat (Mental Illness).
- Class-Action Challenge to Medical Care at Tennessee Jail Results in $3.8 Million Settlement, May 1, 2024. Systemic Medical Neglect, Private Contractors, Jail Specific.
- Unable to Post Bail, Detainee Starves to Death in Arkansas Jail, April 26, 2024. Private Contractors, Food, Water, Jail Specific, Control Units/SHU/Solitary Confinement, Failure to Treat (Mental Illness), Bail/Pretrial Release.
- As ICE Data Errors Persist, GEO Group Cashes In, April 26, 2024. GEO Group/Wackenhut, Contractor Misconduct, Cost of Prison Systems, Immigration Law/Offenses, Detention - Generally.