Full Notification

The Green Bay Police Department is currently investigating an incident where a local corporation’s computer network was compromised and human resources information was stolen by the cyber actor(s). In this case, it appeared the cyber actors utilized a known vulnerability to access the company’s computer systems and human resources software to steal personal identifying information from employees. They then utilized the information to facilitate the theft of significant amounts of money from numerous victims within the organization.

In this case, the exploit utilized by the cyber actors was a known issue to the system vendor and a security patch was made available in October of 2017 for use on this type of computer server. The patch had not been installed and updated in this case despite being available for several months. It is not known if this exploit is being attempted at other area corporations. This incident demonstrates how vital it is to maintain public facing computer systems with the latest security patches from the server companies as cyber actors will attempt to use exploits as long as they are finding vulnerable systems.

Capt. Jeremy Muraski
Green Bay Police Department Investigative Division