Lecture Notes: Whistleblower Claims on DOJ Data Access

Key Points

• Whistleblower Claims:
  • DOJ accessed and took a substantial amount of sensitive data from the National Labor Relations Board (NLRB).
  • Approximately 10 gigabytes of data were taken.
  • Whistleblower: Daniel Barela, supported by his attorney Andrew Pickering.

Background

• National Labor Relations Board (NLRB):

  • Independent federal agency investigating unfair labor practices by employers and unions.
  • Holds sensitive and confidential information which is critical to be protected.

• Significance of Data:

  • The data could be of interest to people like Elon Musk, who might have a vested interest in investigations around his or competing companies.

Investigation Details

• Detection of Data Breach:

  • A spike in data moving out of the NLRB observed.
  • Data leaving databases was unusual, suggesting potential unauthorized access.
  • Efforts were made to rule out other explanations before concluding a breach.

• Whistleblower's Approach:

  • Daniel Barela identified indicators of compromise based on his private sector experience.
  • Reported the breach to Congress with supporting evidence, including a screenshot showing unusual data activity.

• Alleged Data Breaches:

  • Within 15 minutes of DOJ accounts being created, multiple unauthorized access attempts from Russia were noted.
  • Claims of Starlink being used to exfiltrate data, potentially routing sensitive information to Russia.

Broader Implications

• Potential Threats:

  • Sensitive corporate and union-related documents could be exploited by foreign adversaries or competitive interests.
  • Concerns about broader government infrastructure vulnerabilities, similar issues identified beyond NLRB.

• Critical Infrastructure Risks:

  • Comparisons made to the Chernobyl disaster in terms of the potential for systemic failures.
  • Critical databases, including those of the Department of Energy, are potentially exposed.

Personal Threats to Whistleblower

• Safety Concerns:

  • After reporting, Daniel Barela received threats, including photos taken by drones and messages urging him to stop.
  • Threats included personal information and were clearly related to his whistleblowing activities.

• Legal Protection and Response:

  • Legal measures are being taken to protect Daniel Barela and address the threats.

Conclusion

• Acknowledgments:
  • Recognition of Daniel Barela's bravery in coming forward.
  • Highlighted the seriousness of the allegations and potential risks involved.

These notes capture the essence of the whistleblower's claims regarding DOJ's data handling practices and the potential consequences of these actions. The broader implications for government data security and personal safety concerns for the whistleblower were also noted.