State agencies have been warned to ensure their file-sharing web pages are secure after two pornography videos were posted to an unprotected Ohio Department of Natural Resources website.
ODNR violated state internet security regulations when it left the page unprotected by not requiring registration, passwords or other security credentials, according to Office of Information Technology policy.
The “Sexy Babe” files and other questionable files were discovered on the web site last week by a Dispatch reader, prompting ODNR to remove the materials and secure the page to limit the posting of files to authorized users.
The web page is used to transfer large digital files from well-drilling companies to the Department of Natural Resources.
An ODNR spokeswoman said last week that they would begin requiring credentials for the file-sharing site.
Department of Administrative Services spokeswoman Beth Gianforcaro said the incident is believed to be the first in which pornography was posted to the file-sharing web page of a state agency.
“This was not a security nor an attack ... a site used for storage was left open without credentials,” she said. “The state of Ohio is constantly looking for vulnerabilities across the entire system.”
By Randy Ludlow - The Columbus Dispatch, Ohio (MCT)
©2014 The Columbus Dispatch (Columbus, Ohio)
Visit The Columbus Dispatch (Columbus, Ohio) at www.dispatch.com
Distributed by MCT Information Services