<div dir="ltr"><div><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><a href="https://www.usnews.com/news/best-states/idaho/articles/2018-07-26/prison-officials-idaho-inmates-hacked-jpay-tablet-system">https://www.usnews.com/news/best-states/idaho/articles/2018-07-26/prison-officials-idaho-inmates-hacked-jpay-tablet-system</a></div><div dir="ltr"><br></div><div dir="ltr"><div class="gmail-article-body-item gmail-ad-in-text-target" style="box-sizing:inherit;margin:0px;padding:0px;color:rgb(51,51,51);font-family:Roboto,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"><p style="box-sizing:inherit;margin:0px 0px 1.25rem;padding:0px;font-family:inherit;font-size:1rem;font-weight:400;line-height:1.5">Idaho<span> </span>prison officials say 364 inmates exploited vulnerable software in the JPay tablets they use for email, music and games to collectively transfer nearly a quarter million dollars into their own accounts.</p></div><div class="gmail-article-body-item gmail-ad-in-text-target" style="box-sizing:inherit;margin:0px;padding:0px;color:rgb(51,51,51);font-family:Roboto,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"><p style="box-sizing:inherit;margin:0px 0px 1.25rem;padding:0px;font-family:inherit;font-size:1rem;font-weight:400;line-height:1.5">The department's special investigations unit discovered the problem earlier this month, and the improper conduct involved no taxpayer dollars, Idaho Department of Correction spokesman Jeff Ray said on Thursday.</p></div><div class="gmail-article-body-item gmail-ad-in-text-target" style="box-sizing:inherit;margin:0px;padding:0px;color:rgb(51,51,51);font-family:Roboto,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"><p style="box-sizing:inherit;margin:0px 0px 1.25rem;padding:0px;font-family:inherit;font-size:1rem;font-weight:400;line-height:1.5">The hand-held computer tablets are popular in prisons across the country, and they are made available to Idaho inmates through a contract with CenturyLink and JPay. The tablets allow inmates to email their families and friends, purchase and listen to music or play simple electronic games.</p></div><div class="gmail-article-body-item gmail-ad-in-text-target" style="box-sizing:inherit;margin:0px;padding:0px;color:rgb(51,51,51);font-family:Roboto,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"><p style="box-sizing:inherit;margin:0px 0px 1.25rem;padding:0px;font-family:inherit;font-size:1rem;font-weight:400;line-height:1.5">"JPay is proud to provide services that allow incarcerated individuals to communicate with friends and family, access educational programming, and enjoy positive entertainment options that help prevent behavioral issues," JPay spokesperson Jade Trombetta said in a prepared statement. "While the vast majority of individuals use our secure technology appropriately, we are continually working to improve our products to prevent any attempts at misuse."</p><div class="gmail-teads-ad gmail-ad-in-text" id="gmail-inart" style="box-sizing:inherit;margin:0px 0px 1.25rem;padding:0px"></div></div><div class="gmail-article-body-item gmail-ad-in-text-target" style="box-sizing:inherit;margin:0px;padding:0px;color:rgb(51,51,51);font-family:Roboto,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"><p style="box-sizing:inherit;margin:0px 0px 1.25rem;padding:0px;font-family:inherit;font-size:1rem;font-weight:400;line-height:1.5">Mark Molzen, the spokesman for CenturyLink, said the problem involved inmates "intentionally exploiting a software vulnerability to increase their JPay account balances," but said he couldn't provide details because CenturyLink considers it proprietary information. Molzen said the vulnerability issue has since been resolved, however.</p></div><div class="gmail-article-body-item gmail-ad-in-text-target" style="box-sizing:inherit;margin:0px;padding:0px;color:rgb(51,51,51);font-family:Roboto,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"><p style="box-sizing:inherit;margin:0px 0px 1.25rem;padding:0px;font-family:inherit;font-size:1rem;font-weight:400;line-height:1.5">Idaho Department of Correction spokesman Jeff Ray said in a prepared statement that 50 inmates credited their accounts in amounts exceeding $1,000; the largest amount credited by a single inmate was just under $10,000.</p></div><div class="gmail-article-body-item" style="box-sizing:inherit;margin:0px;padding:0px;color:rgb(51,51,51);font-family:Roboto,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"></div><div class="gmail-article-body-item gmail-ad-in-text-target" style="box-sizing:inherit;margin:0px;padding:0px;color:rgb(51,51,51);font-family:Roboto,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"><p style="box-sizing:inherit;margin:0px 0px 1.25rem;padding:0px;font-family:inherit;font-size:1rem;font-weight:400;line-height:1.5">In all, nearly $225,000 was credited into the 364 inmates' accounts.</p></div><div class="gmail-article-body-item gmail-ad-in-text-target" style="box-sizing:inherit;margin:0px;padding:0px;color:rgb(51,51,51);font-family:Roboto,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"><p style="box-sizing:inherit;margin:0px 0px 1.25rem;padding:0px;font-family:inherit;font-size:1rem;font-weight:400;line-height:1.5">"This conduct was intentional, not accidental. It required a knowledge of the JPay system and multiple actions by every inmate who exploited the system's vulnerability to improperly credit their account," Ray said in a prepared statement.</p></div><div class="gmail-article-body-item gmail-ad-in-text-target" style="box-sizing:inherit;margin:0px;padding:0px;color:rgb(51,51,51);font-family:Roboto,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"><p style="box-sizing:inherit;margin:0px 0px 1.25rem;padding:0px;font-family:inherit;font-size:1rem;font-weight:400;line-height:1.5">So far, JPay has recovered more than $65,000 worth of credits, and the company has suspended the ability of the inmates to download music and games until they compensate JPay for its losses, Ray said. The inmates are still able to send and receive emails, however.</p></div><div class="gmail-article-body-item gmail-ad-in-text-target" style="box-sizing:inherit;margin:0px;padding:0px;color:rgb(51,51,51);font-family:Roboto,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"><p style="box-sizing:inherit;margin:0px 0px 1.25rem;padding:0px;font-family:inherit;font-size:1rem;font-weight:400;line-height:1.5">Meanwhile, the Idaho Department of Correction has issued disciplinary offense reports to the inmates who were allegedly involved, which means they could lose privileges and may be reclassified to a higher security risk level.</p></div><div class="gmail-article-body-item gmail-ad-in-text-target" style="box-sizing:inherit;margin:0px;padding:0px;color:rgb(51,51,51);font-family:Roboto,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"><p style="box-sizing:inherit;margin:0px 0px 1.25rem;padding:0px;font-family:inherit;font-size:1rem;font-weight:400;line-height:1.5">The inmates involved are housed at the Idaho State Correctional Institution, Idaho State Correctional Center, Idaho Correctional Institution-Orofino, South Idaho Correctional Institution and the Correctional Alternative Placement Plan facility operated by private prison company MTC Inc.</p></div><br><br clear="all"><div><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><b><span style="font-size:10pt"></span></b><span style="font-size:10pt"></span><span style="font-family:arial,helvetica,sans-serif"></span><br></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>
</div>