Comments on: Disgruntled IT Worker Gets Heavy Prison Sentence

By: commonmember

commonmember — Sat, 18 Apr 2009 19:42:04 +0000

i think it goes to show how a person will react to an unfair judgement and a cut or lack of pay, to what they deserve. companies need to pay their employees what is entitled to them. when people get short-changed theres no telling what they will do.

an innocent plee was right. who the hell would leave these types of things open to be tampered with. whos to say that his employers didnt have access to his accounts and codes. Maybe some other employee higher up on the chain needed to cover up things and used Mr. Oson. knew his skills and pinned it on him. comic book shit right. it could be done. after all fbi was involved. government was involved.

OH!!! BY THE WAY IM HIS NEPHEW!!!!!!!!!!!!!!!!!!!!!!!

By: david

david — Wed, 18 Feb 2009 13:46:07 +0000

Jacktard dude seems to watch too much movies
we’re talking about medical records of thousands of low-income patients! have some common sense and ethic behavior.
an IT pro isn’t god, is just that; IT, it’s almost like any other job
…Sad but seems like everytime a maggot brain have a powerful position something bad comes out

By: Sleepy

Sleepy — Sat, 21 Jun 2008 17:34:14 +0000

I agree with most of you, the sentence was probably just right or maybe a little light even considering he may have caused physical pain or death, and surely knew so. I also agree that the company he worked for dropped the ball as Bogwitch pointed out.

But, I’m also curious, if he “deleted” all this stuff, surely it was noticed right away and at least some of it should have been recoverable via forensics, especially with the FBI on hand?

By: a.random.persona

a.random.persona — Sat, 21 Jun 2008 02:23:58 +0000

I believe the name for these type of people is not hacker, but cracker (not related to reverse engineers). His sentence was stiff but it was rightful. To do something that affects the public is wrong and un-ethical. Hacking to destroy crucial files must be punished and he got what he deserved.

By: Navin

Navin — Fri, 20 Jun 2008 18:29:41 +0000

I’m sorry mates… I didn’t actually comprehend the loss in this manner…. I din’t know tht in Ur country….the loss of medical records can lead to loss of lives…..In India, its not like that!! That brings me to a question…if this data was soooooooooo sensitive, why was it so easily available to be destroyed?? Shouldn’t the employer be held responsible as well??

@rightful….for U hacking means learning…tht’s why U fall into the category of “ethical hacker”…I’m talking about darkhatters, guys who get pleasure from seeing Stock indexes crash or telecom companies disabled, the guys who take PoC viruses and tweak them to destroy files…. and frankly when U’re extremely pissed offwith an employer, U do want to destroy sensitive data….I’m not saying tht they shouldn’t be punished, I’m just saying that it won’t matter!! But as I mentioned at the start, I din’t know that your health system works with ultimate dependencies on cyber data

BTW @happy hacker: I completely agree with Ur points!!

I wanted to know what exacltly does “The dollar cost of Oson

By: Happy Hacker

Happy Hacker — Fri, 20 Jun 2008 14:39:10 +0000

I think Bogwitch has a good point! Although I don’t want to say that Oson Isn’t responsable, I think he should be in jail 1 year for evry record destroyed. (mabey I’m bitter as I have health issues) BUT! And I mean But, the Employer should be brought up on charges of negligence.
For one thoes passwords should be changed at the lest monthly! Secondly, Who depends on only 2 copys of data?, anything worth saving I keep at lest 4 copies of. I hope this leads to an upgade of their software that would alow them to Verify the backup status of the data, I can’t belive no one noticed the backups had been tamperd with! Another $10,000 worth of server equipment and software could have saved the $400,000 in damages and the invaluable information lost, that could potential lead to deaths!
In point I think EVRYONE dropped the ball on this one.

By: Bogwitch

Bogwitch — Fri, 20 Jun 2008 10:04:56 +0000

“On December 23, Oson logged onto servers belonging to his former employer….”

Former employer who didn’t change admin passwords after an admin leaves following a poor review?
Employer who has such sensitive information on servers connected to the Internet?
Employer who doesn’t check that backups are running?

What Orson did was wrong, no question about that but has the employer received any criticism for their shoddy practices? Doesn’t HIPAA have any comments about this?

By: Cor-Paul

Cor-Paul — Fri, 20 Jun 2008 08:54:11 +0000

Hmm… 38 year old scriptkiddies?

I think it’s a bad thing that one guy has the power to do this. On the other hand, I’m quite amazed by the fact that a company that holds medical data is this vulnerable to the actions of one person!

By: Pantagruel

Pantagruel — Fri, 20 Jun 2008 07:40:07 +0000

@ All above

Your all right, his sentence isn’t that big at all, they should have given him life, simply because his wiping of data may have caused lives.
I have absolutely no respect for any hacker/cracker who has a go at medical record and start expunging them, sick.
The guy has done a pretty nice job of ruining both his future and career.
No matter how disgruntled you are about an unfavorable job evaluation, it’s NO excuse to damage non involved people just because you want to get even.

Concerning the hospital/Medical institute, they also have a large part in him being so successful at deleting data. They should have implemented more checking mechanisms and simply not have given him this amount of power.

Indeed a BOFH gone bad

By: Rightful

Rightful — Fri, 20 Jun 2008 01:25:45 +0000

@Navin
I think you should understand the seriousness of this issue, people’s life are hanging around here, someone might die just because the doctors cannot retrieve older IMPORTANT medical informations regarding him/her. Its not just a simple web defacement.

@Navin “. serious dark-hatters have no heart