Ask the Expert

What can we do to block unauthorized, outside access to our e-mail server?

What legal steps can we take if a previous employee is now accessing mail boxes on our server? We can trace unauthorized access back to the IP address of the graduate school this person now attends. Our logs show all the activity that was done. We have already asked all current employees to change their passwords. This change has locked this person out of the e-mail boxes for the time being. What additional steps should we take? Do we have legal grounds to sue? Should we call the police?

    Requires Free Membership to View

I am not a lawyer, so if you need real legal advice, you should find an attorney that specializes in data security. If you are looking to press charges, contact the FBI, as they are responsible for this type of crime, assuming the access crosses state lines. (This last bit of advice also assumes you are in the United States.)

Having said all of that, if you are simply trying to stop this individual, and you have all the records that you say you have, try contacting the IT security department of the university the attacks are coming from. I'm sure the university would be interested in a student that is violating the university's terms of service by using their resources to attack your systems. If not, mention to them that you plan to report this activity to the authorities and/or pursue civil litigation against the university. The threat is often enough for them to take action.

In the mean time, I would suggest blocking all access from the IP block associated with that university.

This was first published in October 2004

There are Comments. Add yours.

 
TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: