Archive — US — techcrunch
Bug in jury systems used by several US states exposed sensitive personal data
A security flaw in jury management systems used by several U.S. states exposed sensitive personal data like names and addresses. The vulnerability, identified in platforms developed by Tyler Technologies, allowed easy brute-force access to juror information. Tyler has acknowledged the issue and is working on a fix, but questions remain about past data exposure incidents.
Key points
- A security bug in jury management systems exposed sensitive data, including names, addresses, and health information of jurors.
- The flaw existed in systems created by Tyler Technologies used by several states, including California and Texas.
- Vulnerability allowed brute-force attacks due to sequential identifier numbers without rate-limiting measures.
- A security researcher discovered the bug and alerted TechCrunch, who informed Tyler Technologies on November 5.
- Tyler acknowledged the vulnerability on November 25 and stated they are working on remediation.
Why it matters
- This incident highlights ongoing concerns over data security in government systems, especially as technology reliance grows.
- In 2023, Tyler Technologies faced exposure issues related to sealed court records, indicating patterns of security lapses.
- The importance of cybersecurity measures is underscored as more states adopt digital platforms for sensitive personal information.
The exposure of sensitive juror information due to a security flaw underscores significant vulnerabilities in digital government systems. As public reliance on technology expands, addressing such flaws is imperative to protect personal data from unauthorized access.