Maricopa Security Breach

The rest of the story

By

MCCCD sued over public records | Maricopa Security Breach

MCCCD sued by local lawfirm over public records. Recent articles in the front page of the Arizona RepublicArizona Daily Independent and Databreaches.net tell the story.

This entire incident could have been avoided had Dr. Glasper and the District Administration taken action in a simple internal grievance document filed by employees back in 2012 to alert the District of the security issues. Policies were ignored by Glasper. The Administration ignored letter after letter from concerned employees like Teresa Toney (Public Stewardship), Kerry Mitchell and Cecilia Quiroz (Presidents of employee groups), IT employees, community members and former employees who tried to raised flags before they left.  Read the entire chronology of events here.

az daily

Demand transparency from MCCCD and sign the online petition.

Millions in taxpayer dollars and employee time are now going towards handling the mismanagement of this situation. Employees are leaving the organization and MCCCD faces heavy penalties and expensive lawsuits.

By

MCCCD employees denied due process | Security Breach

Maricopa Community College District (MCCCD) employees are being denied legal rights to due process by the MCCCD Administration and the hearing committee. MCCCD refuses to comply with employee request to access to public records in order to defend themselves in a public hearing.  Lawsuits are now being filed in court to resolve this matter. MCCCD employees have not received ‘a single’ document since their records request was made months ago. Furthermore, MCCCD appears to have failed to notify their employees of records request as requested in order to preserve evidence. A recent article in the front page of the Arizona RepublicArizona Daily Independent and Databreaches.net tell the story.

The following string of emails represent communications between Mr. Galvan and the hearing committee at MCCCD handling the security breach. Additional communication between these two parties will take place this week. We will post the information as it becomes available. Stay tuned!

mcccd records request

Demand transparency from MCCCD and sign the online petition.

Observations:

  • When an edicational institution is not transparent with the public, it is safe to assume that they have something to hide.
  • The matter of public records request is now in court and Mr. Lee Combs, legal counsel for MCCCD, is being sued for MCCCD refusal to turn over public records. Other lawsuits are on the way.
  • Read More

By

New article on MCCCD Security Breach and lawsuit

Here is extensive coverage on the lawsuit recently filed and other information related to the MCCCD security breach. The entire lawsuit is available for download

http://www.databreaches.net/maricopa-county-community-college-district-sued-to-compel-public-records-production/

databreach

By

Petition – Demand Transparency from MCCCD – Please sign!

Petition – MCCCD Security Breach

Public Audience: Demand transparency from MCCCD! Sign the petition!” and need your help to get it off the ground. Will you take 10 seconds to sign it right now? Here’s the link:

http://www.change.org/petitions/public-audience-demand-transparency-from-mcccd-sign-the-petition-2

Here’s why it’s important:

I support saving the Maricopa County Community College District (MCCCD) through accountability and transparency.  As a result, I am demanding that the MCCCD Governing Board take action in the matter of the data breach in 2013.  I support that the Governing Board obtain a second legal opinion from an outside Information Technology counsel to save Maricopa and taxpayers millions of dollars now being wasted on IT systems and attorneys to deal with the security breach.
If you are looking for a chronology of events that show how this entire incident could have been avoided, look here.  If you are looking for a history of Board minutes since April 2013 to see how much money is being spent, look here.

Please help the MCCCD Governing take action with your support. Millions of taxpayer dollars and future tuition increases are at stake.

After signing this petition, please contact the MCCCD Board members directly to encourage them to take action and help our community.
Read More

By

Maricopa security breach | silent witness line |anonymous feedback

There is a lot taking place inside and outside MCCCD that the public needs to know. At stake is the future one of the largest and most affordable educational institutions in the country.

If you have any documents or information that could help reveal what took place or what’s taking place today at MCCCD, please complete the form below. You may also mail a letter to the address below. We will keep your information confidential.


Acceptable file types: doc,docx,pdf,txt,gif,jpg,jpeg,png.
Maximum file size: 1mb.

Email:  maricopabreach@gmail.com
Phone: 602-920-8709

Address:
The Galvan Law Firm
Maricopa Breach
P.O. Box 17690
Fountain Hills, AZ 85269

By

Class Action Lawsuit Against MCCCD |Security Breach

Here is a link with information on the upcoming class action lawsuit.

http://www.databreaches.net/arizona-law-firm-files-notice-of-claim-over-maricopa-county-community-college-district-breach-class-action-lawsuit-to-follow/comment-page-1/#comment-30162

By

MCCCD Recall | Security Breach | Public Records

Maricopa County Community College District has issued a recall of Public Records that they released to the public. Below is another letter from the MCCCD Administration received today (3/7/2014). It remains as vague and as threatening as the original request.

recall

They are yet to provide us public records needed for Mr. Corzo and Mr. Monsour defense (see related blog). Now, MCCCD appears to be recalling records Mr. Corzo and Mr. Monsour originally obtained and paid for via a formal request for public records . It sounds like they want to make a determination whether those records they released back in 2012 are indeed ‘sensitive and confidential’

District letter2

None of the record released via public records request contain sensitive and confidential information.

When they released public records, they already made the determination that the information in those records was neither sensitive nor confidential.  All these records have been filed with the Federal Government in an EEOC Complaint.

Last but not least, these records are simply proof that someone did not follow policy (see recent ‘MCCCD Policies ignored by Glasper) and that lack of action eventually led MCCCD to the most expensive security breach in their history.  It looks like MCCCD wants to collect all incriminating evidence that their administration did not follow their own policy.
Read More

By

Letter sent from MCCCD to employees to turn over documents

Here is the letter employees received from Jim Bowers, Interim VC of HR at Maricopa Community College District to turn over documents and any confidential and higly sensitive information regarding the MCCCD network.

These letters contain additional threats of disciplinary action. MCCCD has not only denied employees the opportunity to obtain documents necessary to defend themselves, they are now threatening with additional disciplinary actions if the employees do not surrender the few documents that they have and have officially obtained via records request.  These documents are proof that the Chancellor and Vice-Chancellor of ITS were told about the security breaches that ultimately led to the 2013 incident. These documents do not contain any sensitive network information that would put the public at risk.  The biggest risk to the public is an administration that does not listen to their employees and fail to follow establish policy meant to protect the organization.

Mr. Monsour and Mr. Corzo were not responsible for the Network at MCCCD. All sensitive information about the MCCCD network resides with MCCCD and the individuals in charge of the Network.

ITS at MCCCD has seen nearly a 50% attrition. Nearly 60 employees have left the department since 2011.  MCCCD has publicly shared information about its network and vulnerabilities.  MCCCD has publicly acknowledge in the Board minutes from 11/2013 that its environment may not be secured (See below).  These factors by themselves present more risk to the public than anything else.
Read More

By

MCCCD Employees respond to Mr. James Bowers request for documents

Here is the response letter that both Mr. Monsour and Mr. Corzo sent to Jim Bowers by 5pm on 3/4/2013.

Mr Bowers, Interim VC of HR for MCCCD, demanded that Mr. Corzo and Mr. Monsour turn over “possession of highly sensitive and confidential information and documents proprietary to Maricopa Community College District”  & “documents that contain sensitive information about the district’s network”.

Neither Mr. Monsour or Mr. Corzo were in charge of the Network at MCCCD at the time of the 2011 or 2013 incidents. They don’t have any documents containing sensitive information about the district network.  These documents reside with the network team at MCCCD and the Director in charge of the network infrastructure.  Mr. Monsour has been on medical leave since Fall 2012 and Mr. Corzo has never been in charge of the MCCCD network.  These letter is retaliatory in nature and another attempt at intimidating employees. This is one of the reasons why ITS has lost nearly 50% of their staff since 2011.


Mr. James Bowers
Interim Vice Chancellor Human Resources
Maricopa County Community College District

Mr. Bowers;

This letter responds to your February 28, 2014, letter demanding that I turn over “possession of highly sensitive and confidential information and documents proprietary to Maricopa Community College District.”  Without more specificity as to the documents you seek, I am unable to provide you with any documents.

Read More

By

Public records denied to MCCCD employees

The following public records request was sent to MCCCD on Jan 21st, 2014

As of this date, Mr. Corzo and Mr. Monsour are yet to hear back from MCCCD regarding this request.  A hearing date of March 31st, 2014 and April 1st, 2014 has now been set.  The hearing will be public at a location yet to be determined.

The MCCCD District is denying Mr. Corzo and Mr. Monsour public records they need for their own defense.

The media has been stonewalled on public records request.
The following request was sent on January 21 and neither Mr. Monsour or Mr. Corzo have heard back from Maricopa.

———- Forwarded message ———-
From: Miguel Corzo <corzo99@gmail.com>
Date: Tue, Jan 21, 2014 at 6:37 PM
Subject: Galvan – Corzo – Monsour – Records request – Part 1
To: teresa.toney@domail.maricopa.edu, Richard Galvan <rickyofaz1911@gmail.com>

Hello Teresa,

We are making several record requests. Here is part 1 of our request.
We would like to receive items from each request starting with Part 1 as soon as they are completed. If there is anything that you need reworded, let me know.
Please provide us with an estimated completion date as soon as possible.
Thanks,
Miguel

Here are the PDF versions of current public records request:
Read More