Securus Provides Updates on Investigation into Stolen Data Records

Nov 13, 2015, 17:59 ET from Securus Technologies

DALLAS, Nov. 13, 2015 /PRNewswire/ -- Dallas, TX. – Securus Technologies continues to coordinate with law enforcement to investigate stolen data that was apparently provided to online outlet The Intercept according to the outlet's report on November 11, 2015.

Securus takes this matter very seriously, and is working on multiple fronts to fully investigate the matter and to prevent future criminal attacks.  In addition to reporting the situation to the FBI, Securus has retained a forensic data analysis firm to conduct a thorough review of all systems and procedures to verify how this particular incident occurred and to confirm it happened outside of the Securus network and systems. The forensics experts will also recommend any steps to further secure all customer and inmate information.

While still ongoing, Securus can provide several updates and clarifications on the status of its investigation:

  • All information we have gathered to this point indicates that data provided to The Intercept were from a single customer's data files and were likely accessed through a third-party vendor's file-sharing arrangement, unique to that customer. We have not seen what was provided to The Intercept beyond what they've reported, but there is no indication at this point that the theft involved any other customer's data nor that the data was obtained directly from the Securus network or platform.
  • Despite allegations from The Intercept and other parties, we have seen no evidence to date of any attorney-client privileged communications that were recorded in error. While The Intercept reports that they matched call data from the stolen data with phone numbers attached to attorneys' offices, no evidence has been provided that any of these calls were actually recorded, and if so, whether any of them would actually constitute privileged communications. Many calls from facilities are placed daily to law firms that are not subject to attorney client privilege including scheduling calls, informational queries, calls to people other than lawyers who work at law firms. There is a very important distinction between data that indicates that a call took place and an actual recording of the contents of that call. Data about the time and phone numbers of a call are generated for virtually every call that is placed in the U.S., and it is not covered by attorney-client privilege.

    Our calling systems include multiple safeguards to prevent attorney-client recordings from occurring. Licensed attorneys are able to register their numbers or a specific call to exempt them from recording. Attorneys and inmates who do not register their numbers or calls will hear a warning about recording prior to the beginning of each call, and both must actively acknowledge they want to continue the call.

    While it is possible that not all of these safeguards were followed by the callers in some cases, we have seen no evidence to date of recorded calls that would fall under that category. Without direct access to the stolen information, Securus cannot confirm whether any such recorded calls exist. If such evidence exists, we encourage The Intercept or other parties with access to the stolen data to provide that information to the FBI.
  • Contrary to some reports, Securus does not sell call recordings or information to our law enforcement or correctional customers or anyone else. We record calls and provide forensic software to our customers based on the stipulations of our service contracts and in accordance with federal, state and local laws. Retention of these records is also conducted according to laws in various jurisdictions.
  • No credit card data, financial information, social security numbers or similar data from any party was contained in the information that was stolen. While this fact was never in question, we have received multiple questions on this front. Securus does not store credit card information.

Securus is fully committed to completion of a full investigation into this matter.  We will use the results of the investigation to enhance the security of our operations wherever possible to help ensure that a similar situation does not occur in the future.  We will provide updates as new information becomes available.

Logo - http://photos.prnewswire.com/prnh/20100831/DA57799LOGO 

 

SOURCE Securus Technologies