Idaho Inmates Exploit Tablet Software Flaw to Steal $225K

Tablet computers and a software vulnerability were plenty to assistance 364 prison house inmates in Idaho collectively steal $225,000.

According to the Idaho Section of Correction, the inmates were caught earlier this month exploiting a vulnerability in their prison-issued tablets, which allowed them to manipulate the digital credits they used to purchase games and music.

The tablets were issued by JPay, which specializes in offer an online system for prison inmates. The services on board the tablets tin let inmates read and write emails, view educational materials, and access amusement.

JPay Tablet

But apparently, the JPay system as well contained a vulnerability involving account credit amounts, which inmates across five Idaho correctional facilities decided to hack. "Fifty inmates credited their accounts in amounts of more than $1,000. The highest amount credited by a single inmate was $9,990.35," Jeff Ray, spokesman for the Idaho Department of Correction, said in an email.

"This deport was intentional, not accidental," he added. "Information technology required a knowledge of the JPay system and multiple actions by every inmate who exploited the arrangement'south vulnerability to improperly credit their account."

CenturyLink, which operates JPay, declined to disembalm how the software was breached, but the vulnerability has been fixed, it said. The $225,000 was as well stolen from the JPay organisation and was non taxpayer dollars.

So far, only $65,000 of the stolen credits has been recovered. As a punishment, Idaho correctional facilities have suspended the inmates' power to download more music and games until they refund JPay. The inmates are also facing farther disciplinary action that could reclassify the severity of their custody level.