hack of L.A. Metro last month<\/a> that forced it to shut down part of its transit network. <\/p>\nThe Times spoke with several sources familiar with the investigation into the data breach who requested anonymity because they were not authorized to discuss the case publicly, and reviewed a partial inventory of the leaked files, including screenshots of some materials.<\/p>\n
Here\u2019s what we know so far.<\/p>\n
How did hackers get the LAPD files?<\/p>\n
The hacking group appears to have exploited vulnerabilities in a system used by the Los Angeles city attorney\u2019s office, enabling the group to make off with nearly 340,000 files, according to the sources familiar with the case.<\/p>\n
In the wake of the George Floyd protests, the sources said, the city was flooded with dozens of lawsuits from protesters who had been injured by LAPD officers. To handle the deluge of new cases, the city created a file-sharing system so that attorneys on both sides could access discovery materials, including some considered private under court orders.<\/p>\n
It was akin to Dropbox or Google Drive, the sources said, and access was supposed to be restricted to just authorized users.<\/p>\n
But the system, according to two sources familiar with the investigation, was not password-protected because city officials believed that it needed to be accessible to other parties, including outside attorneys hired to assist with civil litigation.<\/p>\n
The sources said the system expanded far beyond its initial scope and came to include records from hundreds of lawsuits involving the LAPD.<\/p>\n
In a statement issued to The Times on Wednesday, Ivor Pine, a spokesperson for the city attorney\u2019s office, described the hack as \u201cunauthorized access to a third-party tool used by the City Attorney\u2019s Office to transfer discovery to opposing counsel and litigants.\u201d<\/p>\n
How did the LAPD and city officials find out?<\/p>\n
Few inside the LAPD knew about the extent of the leak until The Times published a story Tuesday revealing files that appeared online.<\/p>\n
After the news broke on Tuesday, the department released a brief public statement acknowledging the disclosure of \u201cdiscovery documents from previously adjudicated or settled LAPD civil litigation cases.\u201d The department noted that the \u201cbreach does not involve any LAPD systems or networks.\u201d <\/p>\n
Pine said that once the city attorney\u2019s office realized its file-sharing system was compromised, it \u201ctook immediate steps to secure the tool and investigate what information was accessed.\u201d <\/p>\n
\u201cNo other City applications or systems were involved in this incident,\u201d Pine said. \u201cThe information was self contained in this application without any links or access to any department records or systems.\u201d<\/p>\n
What are the consequences of the massive leak?<\/p>\n
The data breach could have political ramifications for embattled City Atty. Hydee Feldstein Soto, who is up for reelection. <\/p>\n
Last week, she earned the endorsement of the powerful Los Angeles Police Protective League, which represents rank-and-file LAPD officers. But union officials contend that Feldstein Soto failed to mention the leaked documents to them until they learned of the hack Tuesday evening.<\/p>\n
On Wednesday, the union issued a scathing statement.<\/p>\n
\u201cTo say we are disappointed by the lack of urgency and forthrightness from the City Attorney\u2019s office is an understatement,\u201d the union\u2019s statement said. \u201cWe will keep asking the tough questions and once we receive answers we will take appropriate action.\u201d<\/p>\n
Feldstein Soto\u2019s challenger in the city attorney\u2019s race, John McKinney, said the public deserves immediate answers. <\/p>\n
\u201cThe lack of transparency isn\u2019t just concerning, it\u2019s unacceptable,\u201d said McKinney, who currently leads the major crimes bureau at the L.A. County district attorney\u2019s office. \u201cBy keeping the public in the dark, witnesses and Los Angeles Police Department families may have been put at risk.\u201d <\/p>\n
Lawyers for police officers reported numerous calls from clients worried their personnel and medical records were exposed, raising the prospect of more costly litigation. About 900 officers are currently suing the department over the 2023 release of mugshot-style images and other materials in response to a public records request. <\/p>\n
How much information was snatched and what\u2019s in it?<\/p>\n
In all, according to posts about the data breach, 7.7 terabytes of information was available for download.<\/p>\n
The LAPD statement described the files in the recent hack as coming from closed cases, but at least one of the files reviewed by The Times involved a lawsuit over an alleged sexual assault by a police officer that was set for trial next week.<\/p>\n
Also disclosed were personnel files from dozens of current and former officers. Every officer\u2019s personnel records are contained within a system called TEAMS II. <\/p>\n
It is a detailed history that includes records on arrests they have made, training sessions they have attended, citizen complaints received against them and lawsuits they have been involved in, along with any history of traffic collisions, shootings or other uses of force, commendations, assignments, workers\u2019 compensation claims and more. <\/p>\n
Such records can be turned over as discovery in civil cases, but almost always under a protective order that restricts them from being shared publicly.<\/p>\n
An untold number of internet users have downloaded the terabytes of data in the weeks since its release. What surfaces next remains to be seen.<\/p>\n","protected":false},"excerpt":{"rendered":"The disciplinary files of Los Angeles police officers are closely guarded secrets, protected by some of the nation\u2019s…\n","protected":false},"author":2,"featured_media":260999,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[27],"tags":[1052,113534,1409,114867,6246,7244,1776,48,52,51,55815,1846,47,50,49,346,2325,5681,114868,11936,1791],"class_list":{"0":"post-260998","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-los-angeles","8":"tag-attorney","9":"tag-breach","10":"tag-city","11":"tag-confidential-file","12":"tag-department","13":"tag-group","14":"tag-information","15":"tag-la","16":"tag-la-headlines","17":"tag-la-news","18":"tag-lapd-official","19":"tag-lawsuit","20":"tag-los-angeles","21":"tag-los-angeles-headlines","22":"tag-los-angeles-news","23":"tag-office","24":"tag-police-officer","25":"tag-record","26":"tag-several-source","27":"tag-system","28":"tag-times"},"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/posts\/260998","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/comments?post=260998"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/posts\/260998\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/media\/260999"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/media?parent=260998"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/categories?post=260998"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/tags?post=260998"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}