Questions still surround SC DOR hack - WTOC-TV: Savannah, Beaufort, SC, News, Weather & Sports

Questions still surround SC DOR hack

Posted: Updated:

We've tried for the past 8 days to get our hands on a contract from the state Department of Revenue. The contract is with a private firm that was supposed to secure your bank account information inside the department's servers. The agency hasn't let us see that contract yet.

It was nearly two weeks ago Gov. Nikki Haley, Revenue Director Jim Etter, and SLED Chief Mark Keel gave an update on the state's hack and the investigation into the hacker.

Since then, our investigation found Etter's department didn't do everything it could to protect your information.

"The fact is that they did not do everything they could do, and there was available for free, a service that has prevented such breaches in a multitude of other agencies, but for some reason that was not in place here," said state Rep. James Smith. "That question needs to be answered."

What DOR had in place was a contract with an information security firm called Trustwave. The information we uncovered shows the agency's spent $230,000 for Trustwave's cyber protection since 2007. The company advertises systems to catch potential hacks.

"Trustwave covered everything," said Haley. "Trustwave covered everything for DOR. So every agency does what they needed to, but they had to get a PCI compliant company. Trustwave did all of that."

The problem is, according to Secret Service, Trustwave didn't discover the hack. The Secret Service says their investigators discovered the hack, and despite Haley's statement, Etter told reporters last month his agency had nothing in place to protect Social Security numbers.

"That was not part of the system at that point," said Etter.

"I mean, I think you have to ask Jim Etter," said Haley. "You're conflicting things. You can ask one of the guys, but what we understand and everything I looked at, Trustwave did what they were contracted to do. We're in the process of finding where the fall was."

We got word late Tuesday that the Revenue Department will make the Trustwave contracts available Wednesday morning. We're told they will also answer questions about what that company was paid to do.

Copyright 2012 WIS. All rights reserved.

Powered by WorldNow