Windham County Sheriffs Office

The Windham County Sheriff's Office is a county-level law enforcement agency operating within Windham County, Vermont, United States. As a sheriff's office, its core responsibilities encompass a range of traditional duties including patrol services, criminal investigations, jail operations, and court security. The office is tasked with the enforcement of local, state, and federal laws within its jurisdictional boundaries. A key aspect of its operations involves the management and transportation of prisoners, a function directly referenced in the known security incident which involved the compromise of prisoner transportation records. The agency also handles administrative tasks such as serving legal processes and providing security for county courts. Its services are directed at the residents and institutions of Windham County, positioning it as a primary local law enforcement body for public safety and corrections support within that specific geographic area.

A defining and publicly documented event in the office's recent history is a significant cyber intrusion that occurred on November 12, 2016. This incident involved an attacker exploiting an SQL injection vulnerability to gain unauthorized access to the office's systems, resulting in a data breach. The compromised data included sensitive operational records such as prisoner transportation logs and internal employee credentials. The breach was exacerbated by poor information security practices; the stored passwords for some personnel, particularly per diem employees, were either weakly hashed using the outdated MD5 algorithm or stored in plaintext, with some accounts protected by easily guessable passwords like 'password1'. Following the intrusion, the threat actor publicly disclosed the exfiltrated data, bringing external scrutiny to the office's cybersecurity posture. This event serves as a notable, evidence-based attribute concerning the organization's historical technological vulnerabilities and the type of sensitive data it handles, including correctional and human resources information. The office functions as a constituent department of Windham County government, with no indicated parent corporation or subsidiary structure, operating under the standard framework for elected sheriff's offices in the state of Vermont.