Massive IT security breach in Connecticut

Published 18 September 2007

Accenture operates CORE-CT, which performs all of Connecticut’s payroll, personnel, purchasing, accounting, inventory, and other functions; it took a copy of the program to demo in Ohio — and the copy was stolen

Accenture has some lucrative contracts in the state of Connecticut. It is a consultant to the Office of the State Comptroller and other state agencies and it operates Connecticut’s CORE-CT computer system. CORE-CT is the computer system which performs all the state’s payroll, personnel, purchasing, accounting, inventory, and other functions. Now the bad news: A recent review of the system shows an “unfathomable” violation of information security, including nearly all state government bank accounts. The information was contained on a backup computer tape stolen in Ohio in June. The stolen tape was being used by the company in the development of a similar state government information system in Ohio. Connecticut governor Jodi Rell directed staff from the Department of Information Technology (DOIT) and the Department of Administrative Services (DAS) to conduct a full-scale review of the tape after ordering officials from Accenture to deliver a copy of the data to DOIT. The Governor issued his order to Accenture after the Office of the State Comptroller, which was in possession of a copy of the tape for several days, failed to make a copy available despite repeated requests. “The review on Saturday shows an unfathomable breach,” Governor Rell said. “The tape contains information on nearly every bank account held by state agencies — including checking accounts, money market accounts, time deposit accounts, savings accounts, trust fund accounts, treasury and certificates of deposit