Georgia Tech Sued Over Cybersecurity Violations

The US government has filed a lawsuit against the Georgia Institute of Technology (Georgia Tech) and its affiliate Georgia Tech Research Corporation (GTRC) for alleged cybersecurity violations.

The Department of Justice (DoJ) has joined a whistleblower to file a “complaint-in-intervention” against the institutions for “knowingly” failing to implement cybersecurity controls as required by their Department of Defense (DoD) contract.

This contract related to research to be performed at Georgia Tech on behalf of the US government agency.

The lawsuit alleges numerous serious cybersecurity violations by Georgia Tech’s Astrovalos Lab, a computer security group in the university.

The lab was accused of failing to develop and implement a system security plan as required by DoD regulations until at least February 2020. When it finally implemented a plan in February 2020, Georgia Tech allegedly failed to properly scope that plan to include all covered laptops, desktops and servers.