🤖 AI Summary
**要約(日本語)**
- **事件の概要**
2019年9月11日、コロラド州のサイバーセキュリティ企業Coalfire Labsに勤務するペネトレーションテスター、ジャスティン・ウィン(29歳)とゲイリー・デメルチオ(43歳)は、アイオワ州司法部門から依頼を受け、州裁判所情報システムのセキュリティテストを実施するためにダラス郡裁判所へ侵入。
手荷物を背負い、深夜に建物内へ潜入したところ、警官に取り囲まれ、逮捕された。警官は「州が郡の建物に侵入を許可する権限はない」と主張し、重罪(第3級侵入窃盗)で逮捕したが、後に軽罪(不法侵入)に減罪、最終的に起訴は取り下げられた。
- **訴訟と和解**
逮捕後、二人は雇用機会の喪失や評判の損傷を訴えて2021年に訴訟を提起。2026年1月、ダラス郡は二人に対し総額60万ドル(約6600万円)の和解金を支払うことで合意した。裁判は本来1月26日に開始予定だったが、和解が成立したため取りやめとなった。
- **当事者の主張**
- デメルチオは「我々の業務は正式に依頼されたもので、公共の利益のために行われた」とし、逮捕は不当で人生を転覆させたと指摘。
- ウィンは「この事件はセキュリティ専門家に対し、政府の脆弱性を指摘する行為が逮捕・起訴につながり得るという凍結的なメッセージを送った」と批判し、公共安全の向上に寄与しなかったと述べた。
- **郡側の見解**
前任の郡検事が起訴を取り下げたことは認めつつ、現検事のマット・シュルツは「今後同様の事案が起きた場合は法の最大限の適用で起訴する」とコメントし、逮捕自体は正当だったと主張した。
**ポイント**
- 公的機関が委託したセキュリティテストでも、地方当局の解釈違いで逮捕に至るリスクがあることが浮き彫りになった。
- 和解金は、法的手続きの遅延や起訴取り下げ後も残る社会的・経済的ダメージへの補償として支払われた。
- 今回の事例は、政府と民間セキュリティ専門家の協働プロセスの明確化と、法的保護の必要性を示す教訓となっている。
"They were crouched down like turkeys peeking over the balcony," the county sheriff told Ars Technica. A half hour past midnight, they were skulking through a courthouse in Iowa's Dallas County on September 11 "carrying backpacks that remind me and several other deputies of maybe the pressure cooker bombs." More deputies arrived...
Justin Wynn, 29 of Naples, Florida, and Gary De Mercurio, 43 of Seattle, slowly proceeded down the stairs with hands raised. They then presented the deputies with a letter that explained the intruders weren't criminals but rather penetration testers who had been hired by Iowa's State Court Administration to test the security of its court information system. After calling one or more of the state court officials listed in the letter, the deputies were satisfied the men were authorized to be in the building.
But Sheriff Chad Leonard had the men arrested on felony third-degree burglary charges (later reduced to misdemeanor trespassing charges). He told them that while the state government may have wanted to test security, "The State of Iowa has no authority to allow you to break into a county building. You're going to jail."
More than six years later, the Des Moines Register reports:
Dallas County is paying $600,000 to two men who sued after they were arrested in 2019 while testing courthouse security for Iowa's Judicial Branch, their lawyer says.
Gary DeMercurio and Justin Wynn were arrested Sept. 11, 2019, after breaking into the Dallas County Courthouse. They spent about 20 hours in jail and were charged with burglary and possession of burglary tools, though the charges were later dropped. The men were employees of Colorado-based cybersecurity firm Coalfire Labs, with whom state judicial officials had contracted to perform an analysis of the state court system's security. Judicial officials apologized and faced legislative scrutiny for how they had conducted the security test.
But even though the burglary charges against DeMercurio and Wynn were dropped, their attorney previously said having a felony arrest on their records made seeking employment difficult. Now the two men are to receive a total of $600,000 as a settlement for their lawsuit, which has been transferred between state and federal courts since they first filed it in July 2021 in Dallas County. The case had been scheduled to go to trial Monday, Jan. 26 until the parties notified the court Jan. 23 of the impending deal...
"The settlement confirms what we have said from the beginning: our work was authorized, professional, and done in the public interest," DeMercurio said in a statement. "What happened to us never should have happened. Being arrested for doing the job we were hired to do turned our lives upside down and damaged reputations we spent years building...."
"This incident didn't make anyone safer," Wynn said. "It sent a chilling message to security professionals nationwide that helping government identify real vulnerabilities can lead to arrest, prosecution, and public disgrace. That undermines public safety, not enhances it."
County Attorney Matt Schultz said dismissing the charges was the decision of his predecessor, according to the newspaper, and that he believed the sheriff did nothing wrong.
"I am putting the public on notice that if this situation arises again in the future, I will prosecute to the fullest extent of the law."
Read more of this story at Slashdot.