US court system ditches electronic filing, goes paper-only for sensitive documents following SolarWinds hack
(2021/02/01)
- Reference: 1612214753
- News link: https://www.theregister.co.uk/2021/02/01/us_court_papers/
- Source link:
The US court system has banned the electronic submission of legal documents in sensitive cases out of concern that Russian hackers have compromised the filing system.
In an extraordinary order handed down to all federal courts late last week – here's an [1]example [PDF] – any documents that “contain information that is likely to be of interest to the intelligence service of a foreign government” will now have to be physically printed out and provided in a physical format.
[2]
The decision follows [3]concerns last month that as a result of the [4]SolarWinds fiasco – in which suspected Kremlin spies gained access to the networks of multiple US government departments via backdoored IT tools – the court system itself may have been hacked, making Highly Sensitive Documents (HSDs) accessible.
Typically those documents are filed through the court system’s electronic filing system but are sealed, requiring specific login access. Despite the online system’s shortcomings (it is clunky, has a dreadful search function and a horribly outdated UI), it has proven an extremely useful resource and allows for quick provision and access to documents.
[5]
But, as the notice says: “In response to recent disclosures of wide-spread breaches of both private sector and government computer systems, federal courts are immediately adding new security procedures to protect highly sensitive documents filed with the courts.”
The new rules don’t apply to whole cases but to any documents that would be viewed as HSDs. They typically involve “national security, foreign sovereign interests, criminal activity related to cybersecurity or terrorism, investigation of public officials, the reputational interests of the United States, and extremely sensitive commercial information likely to be of interest to foreign powers.”
In other words, stuff you don’t want the Russians, or Chinese, or North Koreans, or whoever, reading. That means sensitive wiretap details will go paper as well as any pleadings or offers to cooperate, and so on.
Slow progess
It’s a sign of just how deeply the hackers, who tampered with SolarWinds' Orion suite, managed to penetrate US networks that the court system has taken on a massive additional burden – something that is almost certain to slow the progress of a significant number of cases.
The Administrative Office of US Courts [6]confirmed its system had been breached in January, joining a long list of other US government organizations and Fortune 500 companies that were compromised for anywhere up to six months after installing the tainted tools.
US courts system fears SolarWinds snafu could have let state hackers poke about in sealed case documents [7]READ MORE
As a result, lawyers involved in such cases will have to print out any highly sensitive documents and then hand-deliver them to the courthouse.
Those documents will then be uploaded to a computer at the courthouse that isn’t connected to any network. And lawyers will then have to travel to the court and to that computer to gain access to the docs. Something which is, of course, made even harder thanks to COVID-19 pandemic protocols.
Aside from that, however, security experts are now worried about the potential impact of the Russian government having copies of thousands of highly sensitive non-public documents. Access to large quantities of information on ongoing cases, including who the US government is monitoring and any deals people may be cutting, would be a treasure trove for a foreign intelligence agency.
[8]
It is not thought however that access was gained to the most sensitive US court – the secretive FISA aka Foreign Intelligence Surveillance Court – which runs its own system that is not connected to other networks. ®
Get our [9]Tech Resources
[1] https://www.lamd.uscourts.gov/orders/public_orders/GO%202021-1.pdf
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YBiIAIoFCqb4DNdAdbT0OwAAAA4&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://www.theregister.com/2021/01/08/solarwinds_court_docs/
[4] https://search.theregister.com/?q=solarwinds
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YBiIAIoFCqb4DNdAdbT0OwAAAA4&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://www.uscourts.gov/news/2021/01/06/judiciary-addresses-cybersecurity-breach-extra-safeguards-protect-sensitive-court
[7] https://www.theregister.com/2021/01/08/solarwinds_court_docs/
[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YBiIAIoFCqb4DNdAdbT0OwAAAA4&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[9] https://whitepapers.theregister.com/
In an extraordinary order handed down to all federal courts late last week – here's an [1]example [PDF] – any documents that “contain information that is likely to be of interest to the intelligence service of a foreign government” will now have to be physically printed out and provided in a physical format.
[2]
The decision follows [3]concerns last month that as a result of the [4]SolarWinds fiasco – in which suspected Kremlin spies gained access to the networks of multiple US government departments via backdoored IT tools – the court system itself may have been hacked, making Highly Sensitive Documents (HSDs) accessible.
Typically those documents are filed through the court system’s electronic filing system but are sealed, requiring specific login access. Despite the online system’s shortcomings (it is clunky, has a dreadful search function and a horribly outdated UI), it has proven an extremely useful resource and allows for quick provision and access to documents.
[5]
But, as the notice says: “In response to recent disclosures of wide-spread breaches of both private sector and government computer systems, federal courts are immediately adding new security procedures to protect highly sensitive documents filed with the courts.”
The new rules don’t apply to whole cases but to any documents that would be viewed as HSDs. They typically involve “national security, foreign sovereign interests, criminal activity related to cybersecurity or terrorism, investigation of public officials, the reputational interests of the United States, and extremely sensitive commercial information likely to be of interest to foreign powers.”
In other words, stuff you don’t want the Russians, or Chinese, or North Koreans, or whoever, reading. That means sensitive wiretap details will go paper as well as any pleadings or offers to cooperate, and so on.
Slow progess
It’s a sign of just how deeply the hackers, who tampered with SolarWinds' Orion suite, managed to penetrate US networks that the court system has taken on a massive additional burden – something that is almost certain to slow the progress of a significant number of cases.
The Administrative Office of US Courts [6]confirmed its system had been breached in January, joining a long list of other US government organizations and Fortune 500 companies that were compromised for anywhere up to six months after installing the tainted tools.
US courts system fears SolarWinds snafu could have let state hackers poke about in sealed case documents [7]READ MORE
As a result, lawyers involved in such cases will have to print out any highly sensitive documents and then hand-deliver them to the courthouse.
Those documents will then be uploaded to a computer at the courthouse that isn’t connected to any network. And lawyers will then have to travel to the court and to that computer to gain access to the docs. Something which is, of course, made even harder thanks to COVID-19 pandemic protocols.
Aside from that, however, security experts are now worried about the potential impact of the Russian government having copies of thousands of highly sensitive non-public documents. Access to large quantities of information on ongoing cases, including who the US government is monitoring and any deals people may be cutting, would be a treasure trove for a foreign intelligence agency.
[8]
It is not thought however that access was gained to the most sensitive US court – the secretive FISA aka Foreign Intelligence Surveillance Court – which runs its own system that is not connected to other networks. ®
Get our [9]Tech Resources
[1] https://www.lamd.uscourts.gov/orders/public_orders/GO%202021-1.pdf
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YBiIAIoFCqb4DNdAdbT0OwAAAA4&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://www.theregister.com/2021/01/08/solarwinds_court_docs/
[4] https://search.theregister.com/?q=solarwinds
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YBiIAIoFCqb4DNdAdbT0OwAAAA4&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://www.uscourts.gov/news/2021/01/06/judiciary-addresses-cybersecurity-breach-extra-safeguards-protect-sensitive-court
[7] https://www.theregister.com/2021/01/08/solarwinds_court_docs/
[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YBiIAIoFCqb4DNdAdbT0OwAAAA4&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[9] https://whitepapers.theregister.com/
Re: A smart choice
beast666
No. You need to get a grip.
A smart choice
I've loved the internet ever since I first managed to get my 110 baud modem running, and then a BBS setup when we got 1200 baud! But these days the internet is just like sex through a hole in the toilet wall. It feels good but you have no idea what you are interacting with, machines, fakers, spammers, criminals, and occasionally your friends.
We need to upgrade to a secure communications method that means that we know who we are talking to (or having fun with). I like the idea of freedom of speech but we need to make human happiness (outside the toilet) and trust far more important. Free Speech is good, but I should not be able to say that I'm going to kill everyone who down votes this post. If I said that then it would be a terrible thing to say but it's just free speech - the Internet makes it free to be an idiot.
We need to change our world.