Courthouse Pen Testers Revisit Iowa Arrests and the Fight to Clear Their Names
· 1:35:02 · Watch on YouTube ↗
Summary
Two penetration testers recount their arrests during a contracted Iowa courthouse security assessment, the dispute over authorization, and the dismissal of all charges in January 2020.
Key points
- The Iowa judicial branch commissioned a red-team assessment that included physical access testing at five locations and potential access to internal networks.
- Written rules permitted lockpicking, tailgating and USB insertion but prohibited disabling alarms; the testers said some after-hours permissions were discussed without being fully documented.
- At Dallas County Courthouse, the testers triggered an alarm and presented authorization paperwork to responding deputies. The sheriff disputed the state's authority to authorize entry into county property.
- Both testers were arrested on burglary and burglary-tool charges, held for about 20 hours and released after a combined $100,000 bail was paid.
- According to the interview, a state-commissioned legal investigation concluded that the state had authority to authorize testing as a tenant of the courthouse.
- All charges were dropped on January 30, 2020. The testers described continuing professional and personal consequences from their arrest records.
Article Details
- Topics
- [06:51] Revisiting the Iowa courthouse penetration-testing case
- [08:56] Assessment scope, rules of engagement and authorization documentation
- [14:19] Physical access testing and door-latch bypass methods
- [20:26] Courthouse access, camera blind spots and alarm response
- [24:03] Dallas County Courthouse entry and police response
- [35:31] Disputed authorization, arrests and criminal charges
- [55:58] State-versus-county authority and the legal investigation
- [01:02:51] Dismissal of charges and lasting professional consequences
People
Amy SinclairSenator quoted expressing concern that the courthouse testing endangered contractors, law enforcement and the public.Gary De MercurioInterviewed penetration tester and managing senior who recounts the courthouse assessment, disputed authorization, arrest and legal consequences; the transcript renders his name inconsistently.Justin WynInterviewed penetration tester who describes conducting the contracted Iowa courthouse physical security assessment, his arrest and the subsequent dismissal of charges.Zach WhitingSenator quoted questioning the government's authorization of courthouse entry and calling for accountability.