Ransomware Attack on GEO Group Exposes Sensitive Information
by Matt Clarke
On November 3, 2020, the GEO Group, one of the largest private prison companies in the nation, revealed that it had suffered a ransomware attack in August of that year that exposed sensitive personal information of employees, immigrant detainees and prisoners.
GEO said it was sending data-breach notification letters to all affected individuals, but the company was unaware of any fraud or misuse of the information.
GEO owns or operates 123 facilities with a total of around 93,000 beds and about 23,000 employees in the U.S., U.K. and South Africa.
In a ransomware attack, criminal hackers penetrate a computer system and encrypt vital data. The system’s user is then offered the encryption key in exchange for payment, generally using Bitcoin or another cryptocurrency.
The ransomware attack on GEO compromised data for prisoners at South Bay Correctional and Rehabilitation Facility in Florida, a Pennsylvania youth facility and a now-closed facility in California, as well as employee data on two corporate servers.
The data include medical treatment information, which is private under federal law, and information that could be used in identity theft such as name, date of birth, and Social Security number. GEO worked with law enforcement and cybersecurity firms to investigate the attack.
In a document filed with the U.S. Securities and Exchange Commission, GEO said it was able to recover “critical operating data,” but did not explain whether this involved paying a ransom or the use of backup files. Also unexplained was why GEO waited 76 days to inform people that their data had been compromised.
Sources: eandt.thejet.org, dataprivacyandsecurityinsider.com
As a digital subscriber to Prison Legal News, you can access full text and downloads for this and other premium content.
Already a subscriber? Login
More from this issue:
- Jail Suicides in Massachusetts Point to National Crisis: Challenging Legislatures to Say Not One More, by Jennifer Honig
- From the Editor, by Paul Wright
- Government Refuses to Follow Federal Court’s Discovery Order After Being Caught Recording Attorney Meetings with Prisoners at Leavenworth, by Dale Chappell
- Mississippi Joins Illinois and Few Other States Prioritizing Vaccination of State Prisoners to Slow Spread of COVID-19, by Derek Gilna
- Pandemic Medical Update: “Herd Immunity” at Prisons?, by Michael D. Cohen, MD
- Texas Winter Storm Freezes Plumbing, Power and Prisoners, by Matthew Clarke
- Massachusetts Governor Ends Good Time Offer for Prisoners Taking COVID-19 Vaccine, by David Reutter
- Confidential Settlement in Case Involving Alleged Pattern of Racist Misconduct in Michigan Prisons, by Casey Bastian
- Connecticut Lawmakers Refuse to Address Corrections Issues During Pandemic, by Anthony Accurso
- California Trans Women Struggle For Protection Under Prison Rape Elimination Act, by Edward Lyon
- Oklahoma Prisoners Call for Better Nutrition, by Kevin Bliss
- Florida Jail Administrators Fired After Woman Gives Birth in Cell, by Daniel A. Rosen
- Holiday Cards for Prisoners: Let’s End Collective Punishment in U.S. Prisons, by Sandy Rozek
- COVID-19 Inspired Ban on Prison Visits in Texas Ends, by Chad Marks
- Virginia Settles Two Lawsuits Over Misuse of Solitary Confinement, by Daniel A. Rosen
- COVID-19 Pandemic Makes Job Hunting Especially Difficult for Ex-Offenders, by Kevin Bliss
- Activist, Political Prisoner, and Journalist Mumia Abu-Jamal Diagnosed With COVID-19, Energizing Calls for His Release, by Juliette LaMarr
- U.S. Sues Alabama Over Prison Conditions, by David Reutter
- Florida Prison Guard Indicted in Prisoner Death by Blunt Force Trauma, by David Reutter
- Michigan Begins Video Visits During Coronavirus Pandemic, by David Reutter
- Hawaii Fails to Provide Video of Two Prison Disturbances, by Edward Lyon
- California Prison Factories Fined For Exposing Unwitting Workers to COVID-19, by Mark Wilson
- "Conservative New York County Enacts Progressive Transgender Prisoner Policy", by Mark Wilson
- Sixth Circuit Upholds Prisoner’s 18 U.S.C. § 111 Conviction for Assaulting Federally Contracted Private Prison Guard, by Matthew Clarke
- After 36 Years in a Louisiana Prison for a Rape He Didn’t Commit, Archie Williams Wins Freedom — and a TV Show Spotlight, by Casey Bastian
- COVID-19 Depletes State Prison Staffs Nationwide, Forcing Consolidation of Facilities and Increasing Risk to All, by Derek Gilna
- COVID-19 Continues Rampage Through Pennsylvania State Prisons, by Derek Gilna
- Alabama Jails and Prisoners Swamped With COVID-Related Problems, by Daniel A. Rosen
- $105,000 Settlement in Wisconsin Prisoner’s Excessive Force Claim, by David Reutter
- How States Exclude People With Criminal Records From Jury Service, by Dale Chappell
- Study Shows Misaligned Economic Incentives Fuel Mass Incarceration, by Matthew Clarke
- California Enacts Legislation Strengthening Protections for LGBTQ Prisoners, by Matthew Clarke
- Baltimore Demolishes Maryland’s Oldest Penitentiary, Burying Its Nostalgia And Nightmares, by Michael Fortino, Ph.D
- Books: “Let The Lord Sort Them: The Rise and Fall of the Death Penalty”, by Robert Dunham
- Florida Senator Wants to Keep Ex-Prisoners from Earning the $15 Minimum Wage Increase, by Kevin Bliss
- Former Prisoner Becomes Activist for LBGTQ Rights in California Prisons
- Parnall Correctional Facility in Michigan Copes with Scabies Outbreak, by Kevin Bliss
- People in jails are using more phone minutes during the COVID-19 pandemic, despite decreased jail populations, by Andrea Fenster
- Fourth Circuit: Deaf North Carolina Prisoner Should be Allowed Direct Videophone Calls to Communicate with Deaf Community, by David Reutter
- Ransomware Attack on GEO Group Exposes Sensitive Information, by Matthew Clarke
- Hundreds of Virginia Inmates Await Parole Consideration Under New Law, by Daniel A. Rosen
- Colorado’s Governor Bows to Pressure in Denying State Prisoners Priority COVID-19 Vaccinations, by Derek Gilna
- Experts Divided on Drug Court Effectiveness, by Kevin Bliss
- More Than 40 Immigrants Have Died in ICE Custody, by Anthony Accurso
- Secrecy Surrounded Flurry of Late-Term Federal Executions Under Donald Trump, by Derek Gilna
- New Advocacy Group for New Mexico Prisoners Created, by Dale Chappell
- Vermont Prisoner’s Death Under Investigation: Did Implicit Bias Play Role?, by Kevin Bliss
- News in Brief
More from Matthew Clarke:
- Dissenter Excoriates SCOTUS for Denying Certiorari in Challenge to Constitutionality of Nitrogen Hypoxia Execution, Feb. 1, 2026
- D.C. Federal Court Holds Blocking Prison Reform Advocate’s Access to Federal Prisoners May Violate First Amendment and Due Process, Feb. 1, 2026
- Eleventh Circuit Holds Estate Cannot Sue Jailers Who Followed Medical Personnel Advice That Led to Detainee’s Death, Feb. 1, 2026
- Sixth Circuit Reinstates Lawsuit Over Failure to Properly Classify Violent Prisoners at Kentucky Jail, Feb. 1, 2026
- Eleventh Circuit Holds Alabama County May Be Liable for Policy of Providing Inadequate Jail Medical Care, Feb. 1, 2026
- Tenth Circuit Reverses Summary Dismissal of Claim Over Prisoner’s Suicide in Oklahoma Jail, Feb. 1, 2026
- Deportation of Kenyan Priest Working as Texas Prison Guard Highlights TDCJ’s Dependence on Immigrant Staff, Feb. 1, 2026
- Ninth Circuit Reinstates Wheelchair-Bound Washington State Prisoner’s Suit Over Failure to Accommodate Disabilities During Transport, Feb. 1, 2026
- Massachusetts Supreme Judicial Court Announces Adoption of Transferred Intent Self-Defense, Jan. 1, 2026
- Eleventh Circuit Upholds Dismissal of Six Female Alabama Jail Detainees’ Sexual Assault Suit, Jan. 1, 2026
More from these topics:
- Report: Incarcerated Population in Rural Jails and Prisons At Risk of Losing Hospital Access, Feb. 1, 2026. Systemic Medical Neglect, Private Contractors, Transportation, Rural Prisons, Inadequate Health Care Facilities.
- Eleventh Circuit Holds Estate Cannot Sue Jailers Who Followed Medical Personnel Advice That Led to Detainee’s Death, Feb. 1, 2026. Drug/Alcohol Withdrawal, Private Contractors, Failure to Treat, Medical Neglect/Malpractice, Deliberate Indifference.
- Eleventh Circuit Holds Alabama County May Be Liable for Policy of Providing Inadequate Jail Medical Care, Feb. 1, 2026. Systemic Medical Neglect, Private Contractors, Failure to Treat, Monell Liability, Deliberate Indifference.
- Georgia Grand Jury Dings Augusta Jail for Overcrowding Days Before Violent Detainee Assault, Feb. 1, 2026. Private Contractors, Failure to Protect (General), Overcrowding, Staffing, Failure to Treat (Mental Illness).
- Pennsylvania County Renews $8 Million Contract with PrimeCare Despite Settlements, Feb. 1, 2026. Systemic Medical Neglect, Drug/Alcohol Withdrawal, Private Contractors, Failure to Treat, Contractor Liability.
- Ninth Circuit Hands Partial Victory to NaphCare, Remanding Much of $27 Million Jury Verdict in Washington Jail Death Case, Jan. 1, 2026. Naphcare, Systemic Medical Neglect, Private Contractors, Monell Liability, Deliberate Indifference.
- Almost $28.3 Million Awarded from NaphCare for Washington Jail Detainee Who Lost Leg to Untreated Gangrene, Jan. 1, 2026. Systemic Medical Neglect, Private Contractors, Failure to Treat, Infections, Deliberate Indifference.
- Pennsylvania County and Wellpath Pay Over $1.4 Million to Settle Claims of Four Former Jail Detainees, Including Three Who Died by Suicide, Jan. 1, 2026. Drug/Alcohol Withdrawal, Private Contractors, Failure to Treat, Body Cavity Searches, Suicides.
- Soaring Medical Costs in Washington Jails, Jan. 1, 2026. Private Contractors, Medical Expenses, Malpractice, Jail Specific, Contractor Liability.
- $6.49 Million Settlement for 600,000 Prisoners in Massive CorrectCare Data Breach Class Action, Dec. 1, 2025. Private Contractors, Medical Records, Damages, Settlements, Privacy Act/Rights.

