Security News > 2020 > August > Ever wondered how a pentest turned into felony charges? Coalfire duo explains Iowa courthouse arrest debacle

The pair were performing a routine penetration test at the Dallas County courthouse at night when they tripped an alarm, were collared by deputies, and, ultimately, charged with felony trespassing - a crime that can lead to up to seven years behind bars.

Part of the problem, the two professional attackers told the Black Hat online conference today, was the imprecise terms of the penetration tests Coalfire was hired to perform at the request of the US state of Iowa.

What changed the mood, the pair said, was the arrival of Dallas County Sheriff Chad Leonard, who brushed aside the paperwork they produced, as evidence they were performing a legit security audit for the state, and ordered the pair be arrested on felony charges.

Although the sheriff accepted the duo were professionals on a job, he was unappreciative of the state ordering a penetration test of his county courthouse without checking beforehand.

Crucially, despite the charges ultimately being dropped when common sense prevailed, both DeMercurio and Wynn now have a felony arrest record that shows up during background checks.

News URL

https://go.theregister.com/feed/www.theregister.com/2020/08/05/coalfire_pentest_iowa/