Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Network Security

Snowden Used Password From NSA Co-worker: Report

WASHINGTON – A civilian employee at the National Security Agency has been disciplined after admitting he gave intelligence leaker Edward Snowden his personal encryption details, NBC News reported Thursday.

WASHINGTON – A civilian employee at the National Security Agency has been disciplined after admitting he gave intelligence leaker Edward Snowden his personal encryption details, NBC News reported Thursday.

The employee was among three workers at the NSA who have been sanctioned after being “implicated” in the unprecedented security breach that allowed Snowden to leak a trove of classified documents, according to a memo to lawmakers cited by NBC.

The civilian employee told FBI agents that he provided Snowden with his personal encryption information but was “not aware” the IT contractor planned to divulge secret files to the media, according the the NSA memorandum.

The civilian, who was not named, has been stripped of his security clearance and recently resigned, it said.

The spy agency memo says that the civilian employee shared with Snowden his “public key infrastructure certificate” details, part of an elaborate security system designed to safeguard intelligence computer networks.

In addition, Snowden then asked the civilian to type in his password on his computer terminal, the memo said.

Advertisement. Scroll to continue reading.

“Unbeknownst to the civilian, Mr. Snowden was able to capture the password, allowing him even greater access to classified information,” the memo states.

The account suggests Snowden employed a degree of deception to get his hands on sensitive information, an allegation raised in previous media reports.

But in a public Google chat in January, Snowden denied media reports that he stole or deceived fellow employees to get their log-in information.

“I never stole any passwords, nor did I trick an army of co-workers,” Snowden said.

In addition to the civilian worker, an active duty member of the military and a contractor were banned from NSA buildings in August as they are tied to actions that may have helped Snowden carry out his bombshell leaks, according to the memorandum.

“Further accountability will be determined by their individual employer, not NSA,” the memo said, without providing further details.

The February 10 letter to the House Judiciary and Intelligence committees was described as an “update” on an internal investigation into who was responsible for the massive security breach that permitted Snowden to expose the NSA’s far-reaching electronic spying.

Some lawmakers have sharply criticized the spy agency over its handling of the security breach and demanded to know why no senior figure has been sacked or held accountable over the Snowden affair.

When contacted by AFP, the NSA declined to comment on the memorandum. 

Written By

AFP 2023

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Today’s attackers are no longer breaking in — they’re logging in. Join this live webinar as we break down the modern identity attack chain and examine how recent breaches exploited weaknesses in authentication, identity verification, and access management processes.

Register

AI has accelerated both sides of the fight. Adversaries are weaponizing vulnerabilities faster, while defenders are racing to ship detections and configurations. Join this live webinar as we explore how to prove your controls actually hold against new threats, map your security maturity, and unite breach simulation with automated pentesting into a single, coordinated program.

Register

People on the Move

Stephen Garcia has been named Chief Information Security Officer at BreachRx.

Kasper Lindgaard has been appointed Vice President of Security Strategy at CoreView.

Chaim Mazal has been named Chief Information Security Officer at GitLab.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.