P2011-ND-030

On August 9, 2011, the Organization discovered there had been unauthorized access to its servers. An unknown intruder had created several user profiles with administrative rights on both servers. The incident was discovered by an authorized user who noticed that when logging onto DPI?s server for an update, the internet browser was open to an unfamiliar site with Korean writing. DPI determined that a program had been downloaded to the server at a time when no employees with authorization had done so. This indicated an unauthorized person had been accessing the server.