Juror Data Breach Exposes Sensitive Personal Information in Court Systems

A major security flaw has exposed the personal data of potential jurors across the United States. The vulnerability was found in online portals managed by government software giant Tyler Technologies. This breach could affect courts in multiple states.

According to TechCrunch, the flaw allowed unauthorized access to sensitive juror information. The company is now working on a fix after being alerted to the security failure.

How the Juror Portal Vulnerability Worked

The security issue was simple but severe. Jurors log in using a unique numerical identifier. These numbers were sequential and easy to guess.

The systems also lacked rate-limiting. This means an attacker could make unlimited login attempts without being blocked. A security researcher discovered the flaw and reported it to TechCrunch.

The exposed data was highly sensitive. TechCrunch confirmed it included full names, dates of birth, and home addresses. Phone numbers, email addresses, and occupation details were also visible.

Wider Implications and Tyler’s Response

The impact of this breach is significant for personal privacy. Juror questionnaires often contain deeply personal information. This includes health details used to request service exemptions.

Tyler Technologies confirmed the vulnerability exists. Their security team acknowledged that juror data was accessible via a brute force attack. The company says it has developed a remediation for its clients.

This is not the first security incident for the government tech provider. In 2023, a separate flaw exposed sealed court records. That breach involved sensitive legal documents and witness lists.

The ongoing nature of these security lapses raises serious questions about the protection of sensitive public data. This juror data breach highlights systemic vulnerabilities in essential government software platforms that manage our most private information.

Info at your fingertips

What specific juror information was exposed?

The exposed data included full names, home addresses, and dates of birth. Phone numbers, email addresses, and occupation details were also accessible. Some profiles contained health information used for exemption requests.

Which states were affected by this security flaw?

Vulnerable juror websites were identified in California, Texas, Illinois, and Michigan. Sites in Nevada, Ohio, Pennsylvania, and Virginia were also potentially affected. Tyler Technologies provides software to courts across the U.S. and Canada.

How did the security researcher discover the vulnerability?

The researcher found that juror login IDs were sequential numbers. This made them easy to guess through automated attempts. The lack of rate-limiting on the login pages made brute-force attacks simple to execute.

Has Tyler Technologies fixed the security issue?

The company confirmed the vulnerability and developed a remediation. They are now communicating next steps with their court system clients. The fix is intended to prevent any further unauthorized access.

Why is this data breach particularly concerning?

Juror questionnaires can contain highly sensitive personal and health information. This data could be misused for identity theft or harassment. The breach undermines trust in the judicial process and data security.