Security
SHARE
Facebook X Pinterest WhatsApp

Does the State Dept. Ignore Security?

For the second time in four months, a State Department employee has pleaded guilty to accessing the personal information of citizens in the department’s passport records without proper authorization. According to the Department of Justice, Dwayne F. Cross, 41, of Upper Marlboro, Md., pleaded guilty before Judge John M. Facciola in U.S. District Court for […]

Written By: Richard Adhikari
Jan 18, 2009
Datamation content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More

For the second time in four months, a State Department employee has pleaded guilty to accessing the personal information of citizens in the department’s passport records without proper authorization.

According to the Department of Justice, Dwayne F. Cross, 41, of Upper Marlboro, Md., pleaded guilty before Judge John M. Facciola in U.S. District Court for the District of Columbia to one count of unauthorized computer access.

Cross admitted that he logged on to the State Department’s Passport Information Electronic Records System (PIERS) database and viewed the passport applications of more than 150 celebrities, politicians, members of the media between January 2002 and August 2007. He did so because he was curious. He is scheduled to be sentenced on March 23.

The case comes about four months after State Department intelligence analyst Lawrence C. Yontz pleaded guilty to unlawfully accessing hundreds of confidential passport files.

And last March, the department admitted that the private passport files of all
three presidential candidates had been inappropriately accessed.

More prosecutions may be on the way. “Cross is the second former State Department employee to plead guilty in this continuing investigation,” the DoJ said in its statement. DoJ spokesperson Laura Sweeney declined to comment.

Cross admitted to having access to official State Department computer databases when he served as an administrative assistant in the Bureau of Consular Affairs, Overseas Citizens Services, Children’s Issues at the State Department from August 2001 through February 2008.

Warnings ignored

State Department officials said at a press
briefing in March 2008 that anyone accessing PIERS sees a warning on the computer screen saying the system’s records are protected and access to them is on a need to know basis.

But that warning does not seem to be effective, if the frequency of incidents involving unauthorized access is any indication.

Management indifference is partly responsible for incidents like this, Scott Christie, a partner at law firm McCarter & English and a former federal prosecutor, told InternetNews.com.

“Unless and until there are public embarrassments like this that happen, management will not deem appropriate security measures a high enough priority.”

The lack of proper management showed up during an audit looking at access to PIERS in July, the State Department’s Office of the Inspector General (OIG).

“OIG found many control weaknesses – including a general lack of policies, procedures, guidance, and training – relating to the prevention and detection of unauthorized access to passport and applicant information and the subsequent response and disciplinary processes when a potential unauthorized access is substantiated,” the OIG report on the audit said.

This article was first published on InternetNews.com.

 SEE ALL
ARTICLES 
RA

Richard Adhikari is an experienced writer who specializes in high tech. His areas of focus include cybersecurity, mobile technologies, CRM, databases, software development, mainframe, and mid-range computing, and application development. He has written and edited for numerous publications, including eSecurity Planet and Serverwatch. He is the author of two books on client/server technology.

Recommended for you...

thumbnail AI in Cybersecurity: The Comprehensive Guide to Modern Security
Security
AI in Cybersecurity: The Comprehensive Guide to Modern Security
Liz Ticong
Apr 29, 2024
thumbnail What Is Cybersecurity? Definitions, Practices, Threats
Security
What Is Cybersecurity? Definitions, Practices, Threats
Liz Ticong
Apr 8, 2024
thumbnail How to Secure a Network: 9 Key Actions to Secure Your Data
Security
How to Secure a Network: 9 Key Actions to Secure Your Data
Liz Ticong
Mar 21, 2024
thumbnail 7 Best Data Security Software: Solutions For 2024
Security
7 Best Data Security Software: Solutions For 2024
Kezia Grace Jungco
Mar 20, 2024
Datamation Logo

Datamation is the leading industry resource for B2B data professionals and technology buyers. Datamation's focus is on providing insight into the latest trends and innovation in AI, data security, big data, and more, along with in-depth product recommendations and comparisons. More than 1.7M users gain insight and guidance from Datamation every year.

facebook
youtube
x

Company

About us Contact us Advertise with us

Categories

Trends Big Data Data Center AI Cloud Applications Mobile Open Source Security Storage

Property of TechnologyAdvice. © 2025 TechnologyAdvice. All Rights Reserved

Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.

Terms of Service Privacy Policy California - Do Not Sell My Information