Multimedia News

World AIDS Day: Observing a global epidemic
20 photos
Children from the Andile School choir sing du...
This weekend in sports
20 photos
Venezuela's boxer Jorge Linares, left, exchan...
Holiday gift ideas: Toys, games and more
20 photos
A child holds a newly released mobile phone c...
Black Friday frenzy
20 photos
Early bird shoppers run into a Target store i...
Mumbai massacre
20 photos
A police officer watches the Taj Hotel, Mumba...

Data tampering leads to arrest

Jul 15, 2008 9:35 AM (140 days ago) by Brent Begin, The Examiner
This story ranks Not ranked
Related Topics: SAN FRANCISCO
SAN FRANCISCO (Map, News) - A network administrator making more than $100,000 to oversee San Francisco’s internal fiber optic network was arrested Sunday and will be arraigned today on charges of tampering with the system that stores a majority of The City’s private information.

Terry Childs, 43, is accused of four counts of tampering with The City’s FiberWAN communication network, which connects and stores the data of every division within the city and county of San Francisco. Police said criminal data was not compromised.

City officials would not talk about the specifics of the ongoing investigation but officials say Childs was acting sporadically and making threats in recent months, prompting an investigation by the Department of Telecommunications and Information Services security chief, who was hired earlier this year.

Childs, who worked as a network administrator for about five years, is scheduled to enter a plea this morning in San Francisco Superior Court. He is being held on $5 million bail.

This story continues below
Advertisement

The district attorney charges also call for more than $200,000 in damages, which would help pay an outside contractor to comb through the entire network and eliminate any trace of Childs’ alleged tampering.

“Potentially, the entire city was affected,” said District Attorney Kamala Harris at a news conference Monday announcing the charges.

The FiberWAN network was a recent effort by The City to create a secure platform for communications without having to contract the services to an outside vendor.

“The investigation is ongoing and all we can say is that we have not had any problems or downtime since the investigation began,” said Ron Vinson, the chief administrator for San Francisco’s technology department.

The investigation began June 20 and ended on July 10, Harris said.

Last year, a budget analyst’s report found that The City’s IT system is plagued with “inadequate” security. City employees have entered “confidential data into their personal data drives” and vendors and contractors have had “broad access to department information systems.”

bbegin@sfexaminer.com

Add a Comment


Name: (required)
Comments:
characters left
Comments are regulated by the Terms of Use.

Comments from Examiner Readers

7:28 AM MST on Fri., Aug. 8, 2008 re: "Alleged hacker can’t be fired yet"

Examiner Reader said:
I'm having a real problem with this case. For one, if you read the court docs you will see Terry tried to implement a "security policy" multiple times 3 years ago but the department would not accept them. Then one of his coworkers, who I get the impression was someone Terry felt was incompetent, gets promoted to "Head of Security" and he catches her snooping around his coworkers offices after work hours. He also had filed a complaint against his supervisors a month ago for "creating a hostile work environment" Now these same people want the keys to the network that Terry was responsible for? I think he had a duty to the taxpayers to contest this. Maybe he didn't go about some of this the right way, but it is hardly a jailable offense. I think management locked themselves out of the network. What other admins are they talking about? Terry was the ONLY one they had configuring the systems. He got a copyright on the design for god's sake! I wouldn't be surprised if he sued the city.

11 agree | 3 disagree
Vote on this comment: I agree or I disagree

7:25 PM MST on Sun., Aug. 3, 2008 re: "Data tampering leads to arrest"

Examiner Reader said:
When will the city be complying with the California Security Breach Notification law (CIVIL CODE SECTION 1798.25-1798.29) to notify cititzens that unauthorized users such as Terry Childs and potentially "anyone" (as written by assisstant district attorney Conrad B. del Rosario, Jr. in the motion to oppose bail reduction) have accessed confidential data about private citizens traversing the FiberWAN network?

3 agree | 3 disagree
Vote on this comment: I agree or I disagree
9:42 AM MST on Wed., Jul. 30, 2008 re: "Alleged hacker can’t be fired yet"

Examiner Reader said:
This guy went about this all wrong, but that doesnt mean he didnt have good intentions. He was right to worry about the system he helped build. Look...just a few days after he gave in some idiot lawyers posted the passwords on public documents.

4 agree | 3 disagree
Vote on this comment: I agree or I disagree
12:09 PM MST on Tue., Jul. 29, 2008 re: "Alleged hacker can’t be fired yet"

Examiner Reader said:
IT Manager Rule #1: Never give your subordinates, no matter how much you like them, full admin access to the system without some sort of backup or failsafe, or shadowing system in place. The idea that a SysAdmin could go in and completely lock out the system, and an army of techs and managers unable to crack. It hink it's obviuuos his claim is true, that the system was corrupted and something else was going on. As an existing SysAdmin, I know if I was making his salary, and had a home, and was single. There is NO way I would blow it all away to make a point, unless it was something serious. Theres more than just a 'Hacker' here. The best example of the monkey's in the machines was the recent DA disclosure of passwords accidentily. I truly feel that Child's was a victim of his illusion as a superhero. One thing I have learned in SF, oonly those who have no idea what they are doing, are the ones on TV and in charge. The rest of us just cover their asses. Good luck Childs.

7 agree | 4 disagree
Vote on this comment: I agree or I disagree
11:35 AM MST on Tue., Jul. 29, 2008 re: "Alleged hacker can’t be fired yet"

Examiner Reader said:
""SAN FRANCISCO (Map, News) - Despite Terry Childs’ alleged hijacking of The City’s central network, which has cost hundreds of thousands of dollars to resolve, it could take more than a year to fire him. Perhaps he will resign, he seems like a reasonable and intelligent chap. Then he can get a job in the private sector or maybe working for the CIA or FBI as a consultant?

5 agree | 4 disagree
Vote on this comment: I agree or I disagree
8:12 PM MST on Thu., Jul. 24, 2008 re: "Coding guru relinquishes access"

Examiner Reader said:
the city is corrupt, that is why Childs would give the password to only the mayor. I am sure that when he was hired, that his record came up in the background check, and with all the crooks already employed by the city, they figured he was "one of them", so was hired, making $144,000/year as a system administrator! You cannot make anywhere near this for any company. I am surprised that they are even prosecuting him. The city is known for solving very few murders, being a sanctuary city, so gangs are not prosecuted. The only recent murder that they claim to have solved was committed by a "dead guy", who just happened to have died in a motorcycle crash.

8 agree | 7 disagree
Vote on this comment: I agree or I disagree
9:46 AM MST on Thu., Jul. 24, 2008 re: "Alleged network hijacker has criminal past"

Examiner Reader said:
some guys never grow up. they think they can be bad boys into old age. bad mom. bad dad. probably. now he's bad. but he did go on to engi-nearing. city hall is full of those on the edge, this is just the tip of the ice berg. let's kiss up and go after his job. pucker up. let's send in our naked photos of ourselves to qualify. some did when basic brown was in charge.

4 agree | 5 disagree
Vote on this comment: I agree or I disagree
11:57 PM MST on Wed., Jul. 23, 2008 re: "Coding guru relinquishes access"

Examiner Reader said:
I think he should be fired AND prosecuted. That is ridiculous! Since when is a city's business a playground?

5 agree | 9 disagree
Vote on this comment: I agree or I disagree
12:04 PM MST on Wed., Jul. 23, 2008 re: "Data tampering leads to arrest"

Examiner Reader said:
what's the motive??

6 agree | 5 disagree
Vote on this comment: I agree or I disagree
10:38 AM MST on Wed., Jul. 23, 2008 re: "Coding guru relinquishes access"

Examiner Reader said:
He should receive an appropriate punishment for his actions and his attitude.

6 agree | 7 disagree
Vote on this comment: I agree or I disagree
Advertisement