Kemp seeks Trump’s help in alleged DHS hack

Georgia Secretary of State Brian Kemp on Wednesday asked President-elect Donald Trump to investigate the Department of Homeland Security’s apparent attempt to access his office’s computer system.

In a letter to Trump, Kemp asked that the president-elect to act once he is sworn in to office in January. Kemp said he is not satisfied with the response from current DHS Secretary Jeh Johnson.

“Since contacting DHS with these concerns, we have collaborated with the agency and provided extensive, additional information,” Kemp wrote. “Last night I received a letter from Secretary Johnson which lacked any specific information as to the attacks’ intent or origin despite the fact that many questions remain unanswered.”

Kemp’s office detected what he called a “large attack on our system” in November. His staff was able to trace the breach to the Department of Homeland Security. DHS has denied it tried to break through the state’s computer firewall.

An agency spokesman declined comment Wednesday. But in the letter Johnson sent Kemp on Monday, the Homeland Security secretary said they traced the computer in question to a contractor at its Federal Law Enforcement Training Center in Brunswick.

Johnson said the contractor is not part of the department’s cyber security team.

“He told us that he accessed your website as part of his normal job duties at FLETEC to determine whether incoming FLETEC contractors and new employees had a certain type of professional license – a service that, as I understand it, your website provides to the general public,” Johnson wrote, noting that their analysis showed it was “normal Microsoft Internet Explorer interaction by the contractor’s computer with your website.”

Kemp is not convinced.

“The scenario DHS has proposed has still not been verified by Microsoft,” Kemp wrote Johnson late Tuesday. “There are still many questions regarding the origin and intent of this attack that remain unanswered.”

Kemp, a potential Republican candidate for governor in 2018, told The Atlanta Journal-Constitution that DHS’s explanations keep changing and that Kemp’s own information technology staff cannot replicate what the feds say happened.

“It’s almost like they’re making it out to be that this is some sort of false positive,” Kemp said. “And we just have all these questions that haven’t been answered. The best way to get those answers was to ask the new administration to look at it.”

Federal officials seem to think the situation is resolved, Kemp said, but he is not ready to move on.

“Georgians are asking me about it,” he said. “We need to get to the bottom of it. And they’re acting like they already have. I need some proof.”

Steve Akridge, owner of BorderHawk LLC, an Atlanta-based cyber security company, questions Johnson’s explanation.

“The concept of an Internet Explorer guy doing a search on the Secretary of State’s website giving signs that you’re being scanned, trying to break into that machine … I would find that very hard to believe,” Akridge, who was the state of Georgia’s first chief information security officer in 1999, said.

But, Akridge said it is also difficult to know for sure without more information.

In his letter to Trump, Kemp also said his staff uncovered other attempts to break his system’s firewall. They detected 10 separate “scans” of Georgia’s elections systems between Feb. 2 and Nov. 15, all traced back to DHS. Many occurred suspiciously close to other events, Kemp said, including the day he testified against Homeland Security before a congressional committee and election day.

Kemp publicly questioned alarms raised by federal officials before the presidential election over the issue of election security.

Georgia was one of two states that did not accept federal help to secure its election systems, after the FBI’s cyber division warned states in August that it was investigating hacking incidents in two states — believed to be Arizona and Illinois.

A month later, state officials said Georgia was not among the states that had voter registration systems targeted in recent months by hackers. That claim came after FBI Director James Comey told House Judiciary Committee members that his agency had detected a variety of “scanning activities” related to election systems in the United States.

Kemp said Wednesday that the agency’s outside cyber security vendor only alerted them to the Nov. 15 incident because it was a more serious event. Once the incident was traced to DHS, the office found the nine earlier incidents that were not considered to be as serious.

“We get 2,000 low level pings, hits, scans whatever you want to call them on our network, a week,” Kemp said. “We have four or five of those that will get tagged for whatever reason that are higher level. There is something about them that the network security provider kicks back to us. Normally we run those down, there’s a good explanation for it, we dismiss it we move on.”

The Nov. 15 event was different, he said. “It got tagged, but nobody could easily explain what was happening, which is why it rose to my level and it really got on our radar when we figured out the IP address. It’s only because of that we would go back and look at these lower level ones.”

Kristina Torres contributed.

Reader Comments ...

Next Up in Georgia Politics

Mayor Reed puts airport exec on leave amid concerns over contracts
Mayor Reed puts airport exec on leave amid concerns over contracts

A high-ranking official at Hartsfield-Jackson International Airport has been placed on administrative leave after the mayor’s office learned that his wife is doing business with an airport subcontractor. A spokeswoman for Mayor Kasim Reed said Friday that the action was taken against Cortez Carter, deputy general manager at the airport, whose...
The Week: Blank says kneeling should not be seen as disrespect
The Week: Blank says kneeling should not be seen as disrespect

Atlanta Falcons owner Arthur Blank offered his own interpretation of protests NFL players have staged this season by kneeling during the national anthem. “It’s very clear that the players have no interest whatsoever in being disrespectful to the flag or the anthem,” Blank told GPB’s Ricky Bevington this past week. &ldquo...
Dunwoody man goes from battling brain cancer to DNR hunting consultant
Dunwoody man goes from battling brain cancer to DNR hunting consultant

When Chip Madren was in seventh grade, doctors told his family the type of brain cancer he had gave him about two more years to live. It was his love of hunting that caused him to fight for his life, his mother said, after being promised a trip to Montana when he got better. “He was not fighting well up until that time,” Lea Madren said...
Move for freer political speech divides Georgia’s religious community
Move for freer political speech divides Georgia’s religious community

It’s a regular ritual on Sundays before big votes: Candidates fan out to churches across the state, take prominent perches near the pulpit and receive warm applause from parishioners. And preachers inevitably shower them with kind words, though they stop short of much more lest they cross an invisible line. That’s exactly what happened...
Georgia’s craft brewers would win big in Senate tax bill
Georgia’s craft brewers would win big in Senate tax bill

The U.S. Senate’s new tax bill would give Georgia’s small craft breweries some holiday cheer months after a watershed state law provided a major economic boon to beer makers and liquor distillers. The would-be Christmas present comes in the form of a proposed tax decrease, which industry advocates say would put thousands of dollars into...
More Stories