Daniel Estrin

I saw that there was a good 10 gigabyte spike within a matter of maybe two hours that lined up right about the time that they had their access accounts. It would represent data that was being copied from within our system to outside of our system. And for it to spike like that, that's across the board probably the number one indicator that you've been breached.

I saw that there was a good 10 gigabyte spike within a matter of maybe two hours that lined up right about the time that they had their access accounts. It would represent data that was being copied from within our system to outside of our system. And for it to spike like that, that's across the board probably the number one indicator that you've been breached.

I saw that there was a good 10 gigabyte spike within a matter of maybe two hours that lined up right about the time that they had their access accounts. It would represent data that was being copied from within our system to outside of our system. And for it to spike like that, that's across the board probably the number one indicator that you've been breached.

I went to, you know, obviously immediately try to validate that this was not legitimate copying. And so I first went to the dev team, validated that nobody was working on the systems at that time. It was like an early morning. So it did make sense for them anyway.

I went to, you know, obviously immediately try to validate that this was not legitimate copying. And so I first went to the dev team, validated that nobody was working on the systems at that time. It was like an early morning. So it did make sense for them anyway.

I went to, you know, obviously immediately try to validate that this was not legitimate copying. And so I first went to the dev team, validated that nobody was working on the systems at that time. It was like an early morning. So it did make sense for them anyway.

Instructions to drop it, to not file the report. It was one of those situations where it just, it bothered everybody that was involved in my agency and especially my department to do that. And so there was a lot of concern amongst us about that.

Instructions to drop it, to not file the report. It was one of those situations where it just, it bothered everybody that was involved in my agency and especially my department to do that. And so there was a lot of concern amongst us about that.

Instructions to drop it, to not file the report. It was one of those situations where it just, it bothered everybody that was involved in my agency and especially my department to do that. And so there was a lot of concern amongst us about that.

I wouldn't be able to live with myself otherwise. To know that this data was out there, it's going to impact these cases. It's going to cost people their real livelihoods. And for that to happen with nobody knowing what happened, that's the biggest travesty of all. And I believe with all my heart that this goes far beyond just case data.

I wouldn't be able to live with myself otherwise. To know that this data was out there, it's going to impact these cases. It's going to cost people their real livelihoods. And for that to happen with nobody knowing what happened, that's the biggest travesty of all. And I believe with all my heart that this goes far beyond just case data.

I wouldn't be able to live with myself otherwise. To know that this data was out there, it's going to impact these cases. It's going to cost people their real livelihoods. And for that to happen with nobody knowing what happened, that's the biggest travesty of all. And I believe with all my heart that this goes far beyond just case data.

I know that there are other admins at other agencies I've spoken to who have seen similar behavior. And they are uncomfortable speaking up. They're uncomfortable reporting it because at the end of the day, they have families. They have things on the line that have been implicitly threatened. Standing up like this, I'm not hopeful for the outcome for me.

I know that there are other admins at other agencies I've spoken to who have seen similar behavior. And they are uncomfortable speaking up. They're uncomfortable reporting it because at the end of the day, they have families. They have things on the line that have been implicitly threatened. Standing up like this, I'm not hopeful for the outcome for me.

I know that there are other admins at other agencies I've spoken to who have seen similar behavior. And they are uncomfortable speaking up. They're uncomfortable reporting it because at the end of the day, they have families. They have things on the line that have been implicitly threatened. Standing up like this, I'm not hopeful for the outcome for me.

What I'm hopeful is that people look and say, hey, somebody else did it. I can do it too. And if enough people stand up... It can form a movement. And these practices that they're breaking security and violating and stealing data without anyone knowing, it can be stopped.

What I'm hopeful is that people look and say, hey, somebody else did it. I can do it too. And if enough people stand up... It can form a movement. And these practices that they're breaking security and violating and stealing data without anyone knowing, it can be stopped.

What I'm hopeful is that people look and say, hey, somebody else did it. I can do it too. And if enough people stand up... It can form a movement. And these practices that they're breaking security and violating and stealing data without anyone knowing, it can be stopped.

Be transparent. If you have nothing to hide... Don't delete logs. Don't be covert about your entrance to agencies. Be open. Because that's what efficiency is really about. If this is all huge misunderstanding, then just prove it. Put it out there. That's all I'm asking.

Be transparent. If you have nothing to hide... Don't delete logs. Don't be covert about your entrance to agencies. Be open. Because that's what efficiency is really about. If this is all huge misunderstanding, then just prove it. Put it out there. That's all I'm asking.