Powered By InformationWeek Business Technology Network
 
Welcome Guest. | Log In| Register | Membership Benefits
  • Email this page E-mail this page
  • |  Print Print this page
  • |   Bookmark and Share

Former Database Administrator Convicted Of Hacking His Old Firm

Ex-employee attacked his old database months after being terminated

Nov 20, 2009 | 10:32 AM

By Tim Wilson
DarkReading

A former database administrator for GEXA Energy has been convicted after pleading guilty to hacking his former employer's database system.

The conviction of Steven Jinwoo Kim, 40, was announced yesterday by U.S. Attorney Tim Johnson, according to a news report by DataBreaches.net.

At a hearing before U.S. District Judge Vanessa Gilmore, Kim admitted to recklessly causing damage to a GEXA Energy protected computer, the report says. GEXA Energy is a retail electric utility provider based in Houston.

On Feb. 5, 2008, GEXA Energy terminated Kim's employment as a database administrator and permanently revoked his access to all GEXA Energy facilities, computer networks, and information technology systems, the report says. Approximately three months later, Kim remotely accessed the GEXA Energy computer network and GEXA Energy Management System (GEMS) database.

While connected to the GEXA Energy computer network, Kim recklessly caused damage by, among other things, issuing various Oracle database commands that created a new data table in the GEMS production database. When copied to the GEMS staging database, that caused the automated script to fail, thus impairing the availability of data.

As a result of Kim's intrusion into its protected computer system, GEXA Energy incurred a loss of at least $100,000 -- the costs associated with troubleshooting, securing, and repairing the GEXA Energy computer network and GEMS database, the report says. Kim was indicted in June 2009.

GEXA customers were not notified of the breach until April 2009. In letters sent to those affected, the utility provider indicated it had been prohibited from telling them of the incident sooner because of the investigation.

Judge Gilmore set Kim's sentencing for March 1. He faces a maximum punishment of five years imprisonment and/or a $250,000 fine. Kim has been permitted to remain on bond pending his sentencing.

Have a comment on this story? Please click "Discuss" below. If you'd like to contact Dark Reading's editors directly, send us a message.


Subscribe to RSS



Insider Threat Reports

report Inside Out: Protecting Your Partnerships -- and Your Data
Today's businesses depend on e-commerce among partners, but allowing third parties to access internal networks may endanger your data. How can IT security pros ensure that contractors, supplies and others get the access they need -- without becoming threats? This report offers some answers.

report Rotten Apples: How To Detect And Stop Malicious Insiders In Your Organization
Most data leaks are unintentional - but in every enterprise, there are a few hard cases that defy this truism and threaten the very heart of your data.What can you do to stop these rotten apples from using their intimate knowledge of your organization - and its data access methods - to wreak havoc? This report offers a detailed look at how malicious insiders might attack your data, how they’re motivated, and what you can do to stop them.

report Understanding The Insider Threat
Think you know your trusted users? Think again. The availability of new Internet technologies and the pressures of a spiraling economy are changing the nature of the data breach, and your employees may have their fingers on the trigger. This report offers a look at the full spectrum of insider threats, and the risks associated with each.

report Well-Meaning Employees -- And How To Stop Them
The most dangerous threat to your data isn't hackers or criminal insiders: it's the well-meaning employee, whose missteps may lead to the unintentional leak of your most sensitive corporate data. Learn how employees accidentally expose sensitive information, and how you can keep those good intentions from paving the road to your company's ruin.