Two employee at Coalfire, a cybersecurity company, conducted pen tests of the Iowa county courthouses. These breaches worried officials which led to the two cybersecurity employees being arrested. A letter was given explaining the partnership between the company and courthouse that explained that the pen tests were authorized. They were still taken into custody, despite giving the letter prior to their arrest.
The confusion lead to a struggle between both parties just trying to do their jobs. One side wanting to test the security measures while the other was enforcing security by arresting intruders. This week charges were dropped after a meeting took place between Coalfire and the Iowa county courthouse representatives. The CEO of Coalfire made comments saying that there is something to be learned through this misunderstanding. The company will not adopt more best practices when conducting pen tests when working with companies or law enforcement. Read More.
