State still vulnerable to hackers, extent unknown


Vulnerabilities identified in an audit conducted three years ago remain unsolved.

Share this article!

BY JACOB PALMER | DIGITAL NEWS EDITOR

Data-security vulnerabilities identified in an audit conducted three years ago remain unsolved, highlighting a persistent problem for the state as it tries to protect itself from hackers.

The extent of the vulnerability is unknown, the Portland Tribune reports.

Matt Shelby, a spokesman for the Department of Administrative Services, wrote in an email that “… there is little beyond the header that we would release because it discusses past and current security issues at the State Data Center.” Nonetheless, Shelby said in an interview Tuesday that according to state Chief Information Security Officer Stefan Richards, employees have addressed approximately one-third of the security issues cited by auditors.

“The other two-thirds, we’ve made significant progress,” Shelby said. “By that, I mean 50 percent to 75 percent of what we think we need to do.”

The data center’s efforts at modernizing its security systems is still a work in progress.