Sealed U.S. Court Records Exposed in Solar Winds Breach
Summary: The Administrative Office of the U.S. Courts said its Case Management/Electronic Case Files system was compromised in the SolarWinds supply chain attack, and a source told KrebsOnSecurity the intruders seeded the network with second-stage "Teardrop" malware beyond the "Sunburst" code pushed to some 18,000 Orion users. The AO said it is working with DHS on a security audit and will accept highly sensitive sealed filings only in paper form or on a secure device stored in a stand-alone system, not uploaded to CM/ECF.
Bottom line: Sealed filings can hold trade secrets, subpoenas for email records, and trap-and-trace requests; as Berkeley's Nicholas Weaver put it, this would be "a treasure trove for the Russians knowing about a lot of ongoing criminal investigations," including sealed indictments where no arrest has yet been made.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026