Should there be a full criminal investigation of the Bernie Sanders data breach?

[Renew Deal]

115. Here is what VAN said

As soon as we realized that there was an issue, we immediately mobilized our engineers to investigate the source of the issue. While we investigated the issue, we restricted access to affected areas of the VAN product for all users and limited access to data exports. Engineers quickly discovered the problem, and developed a fix.

We immediately began an audit to determine if any users had intentionally or unintentionally gained access to data they normally would not have access to within the limited timeframe when the bug was live. Our team removed access to the affected data, and determined that only one campaign took actions that could possibly have led to it retaining data to which it should not have had access.


http://blog.ngpvan.com/news/data-security-and-privacy

That one campaign is the one that fired a guy and apologized. Now bring in the feds.

The DNC is the administrator of the system and the Clinton campaign is the victim. That's why they would be "seemingly coordinated."


This is the part of the contract that permits the DNC to cut off the data

Cutting off access during the breach is covered here:

16) The Agreement requires the DNC to “use security measures, with respect to the
Campaign Data, that are consistent with good practices in the data processing industry.”
Agreement, ¶ 3(f). Under the Agreement, the DNC warrants that its services shall “be performed
in a professional and workmanlike manner, consistent with industry standards in the data
processing industry.” Agreement, ¶ 8.


Keeping access cut off until the problem is resolved is covered here:

17) The Agreement further requires the DNC to “take all measures necessary to
protect the secrecy of, and to avoid disclosure and unauthorized use of” confidential information
disclosed by the Campaign to the DNC (“Confidential Information”). Agreement, ¶ 7(a).
Pursuant to the Agreement, the DNC undertakes to “immediately notify the Campaign in the
including the full extent of the time, place and manner of the use or disclosure and the corrective
steps taken by the DNC to address the unauthorized use or disclosure.” Id.

Those two clauses let the DNC do what it needs to do to protect the data.