Ransomware Attack on GEO Group Exposes Sensitive Information
by Matt Clarke
On November 3, 2020, the GEO Group, one of the largest private prison companies in the nation, revealed that it had suffered a ransomware attack in August of that year that exposed sensitive personal information of employees, immigrant detainees and prisoners.
GEO said it was sending data-breach notification letters to all affected individuals, but the company was unaware of any fraud or misuse of the information.
GEO owns or operates 123 facilities with a total of around 93,000 beds and about 23,000 employees in the U.S., U.K. and South Africa.
In a ransomware attack, criminal hackers penetrate a computer system and encrypt vital data. The system’s user is then offered the encryption key in exchange for payment, generally using Bitcoin or another cryptocurrency.
The ransomware attack on GEO compromised data for prisoners at South Bay Correctional and Rehabilitation Facility in Florida, a Pennsylvania youth facility and a now-closed facility in California, as well as employee data on two corporate servers.
The data include medical treatment information, which is private under federal law, and information that could be used in identity theft such as name, date of birth, and Social Security number. GEO worked with law enforcement and cybersecurity firms to investigate the attack.
In a document filed with the U.S. Securities and Exchange Commission, GEO said it was able to recover “critical operating data,” but did not explain whether this involved paying a ransom or the use of backup files. Also unexplained was why GEO waited 76 days to inform people that their data had been compromised.
Sources: eandt.thejet.org, dataprivacyandsecurityinsider.com
As a digital subscriber to Prison Legal News, you can access full text and downloads for this and other premium content.
Already a subscriber? Login
More from this issue:
- Jail Suicides in Massachusetts Point to National Crisis: Challenging Legislatures to Say Not One More, by Jennifer Honig
- From the Editor, by Paul Wright
- Government Refuses to Follow Federal Court’s Discovery Order After Being Caught Recording Attorney Meetings with Prisoners at Leavenworth, by Dale Chappell
- Mississippi Joins Illinois and Few Other States Prioritizing Vaccination of State Prisoners to Slow Spread of COVID-19, by Derek Gilna
- Pandemic Medical Update: “Herd Immunity” at Prisons?, by Michael D. Cohen, MD
- Texas Winter Storm Freezes Plumbing, Power and Prisoners, by Matthew Clarke
- Massachusetts Governor Ends Good Time Offer for Prisoners Taking COVID-19 Vaccine, by David Reutter
- Confidential Settlement in Case Involving Alleged Pattern of Racist Misconduct in Michigan Prisons, by Casey Bastian
- Connecticut Lawmakers Refuse to Address Corrections Issues During Pandemic, by Anthony Accurso
- California Trans Women Struggle For Protection Under Prison Rape Elimination Act, by Edward Lyon
- Oklahoma Prisoners Call for Better Nutrition, by Kevin Bliss
- Florida Jail Administrators Fired After Woman Gives Birth in Cell, by Daniel A. Rosen
- Holiday Cards for Prisoners: Let’s End Collective Punishment in U.S. Prisons, by Sandy Rozek
- COVID-19 Inspired Ban on Prison Visits in Texas Ends, by Chad Marks
- Virginia Settles Two Lawsuits Over Misuse of Solitary Confinement, by Daniel A. Rosen
- COVID-19 Pandemic Makes Job Hunting Especially Difficult for Ex-Offenders, by Kevin Bliss
- Activist, Political Prisoner, and Journalist Mumia Abu-Jamal Diagnosed With COVID-19, Energizing Calls for His Release, by Juliette LaMarr
- U.S. Sues Alabama Over Prison Conditions, by David Reutter
- Florida Prison Guard Indicted in Prisoner Death by Blunt Force Trauma, by David Reutter
- Michigan Begins Video Visits During Coronavirus Pandemic, by David Reutter
- Hawaii Fails to Provide Video of Two Prison Disturbances, by Edward Lyon
- California Prison Factories Fined For Exposing Unwitting Workers to COVID-19, by Mark Wilson
- "Conservative New York County Enacts Progressive Transgender Prisoner Policy", by Mark Wilson
- Sixth Circuit Upholds Prisoner’s 18 U.S.C. § 111 Conviction for Assaulting Federally Contracted Private Prison Guard, by Matthew Clarke
- After 36 Years in a Louisiana Prison for a Rape He Didn’t Commit, Archie Williams Wins Freedom — and a TV Show Spotlight, by Casey Bastian
- COVID-19 Depletes State Prison Staffs Nationwide, Forcing Consolidation of Facilities and Increasing Risk to All, by Derek Gilna
- COVID-19 Continues Rampage Through Pennsylvania State Prisons, by Derek Gilna
- Alabama Jails and Prisoners Swamped With COVID-Related Problems, by Daniel A. Rosen
- $105,000 Settlement in Wisconsin Prisoner’s Excessive Force Claim, by David Reutter
- How States Exclude People With Criminal Records From Jury Service, by Dale Chappell
- Study Shows Misaligned Economic Incentives Fuel Mass Incarceration, by Matthew Clarke
- California Enacts Legislation Strengthening Protections for LGBTQ Prisoners, by Matthew Clarke
- Baltimore Demolishes Maryland’s Oldest Penitentiary, Burying Its Nostalgia And Nightmares, by Michael Fortino, Ph.D
- Books: “Let The Lord Sort Them: The Rise and Fall of the Death Penalty”, by Robert Dunham
- Florida Senator Wants to Keep Ex-Prisoners from Earning the $15 Minimum Wage Increase, by Kevin Bliss
- Former Prisoner Becomes Activist for LBGTQ Rights in California Prisons
- Parnall Correctional Facility in Michigan Copes with Scabies Outbreak, by Kevin Bliss
- People in jails are using more phone minutes during the COVID-19 pandemic, despite decreased jail populations, by Andrea Fenster
- Fourth Circuit: Deaf North Carolina Prisoner Should be Allowed Direct Videophone Calls to Communicate with Deaf Community, by David Reutter
- Ransomware Attack on GEO Group Exposes Sensitive Information, by Matthew Clarke
- Hundreds of Virginia Inmates Await Parole Consideration Under New Law, by Daniel A. Rosen
- Colorado’s Governor Bows to Pressure in Denying State Prisoners Priority COVID-19 Vaccinations, by Derek Gilna
- Experts Divided on Drug Court Effectiveness, by Kevin Bliss
- More Than 40 Immigrants Have Died in ICE Custody, by Anthony Accurso
- Secrecy Surrounded Flurry of Late-Term Federal Executions Under Donald Trump, by Derek Gilna
- New Advocacy Group for New Mexico Prisoners Created, by Dale Chappell
- Vermont Prisoner’s Death Under Investigation: Did Implicit Bias Play Role?, by Kevin Bliss
- News in Brief
More from Matthew Clarke:
- In Texas, Harris County Commissioners Approve $1.2 Million for Fourth Study of Jail Since 2020 After Dozens of Abuse Allegations, April 1, 2026
- Eighth Circuit Revives Lawsuit Over Iowa Jail Detainee’s Suicide, April 1, 2026
- Groundbreaking Statistical Study of Pregnant Texas Jail Detainees Finds Over 400 Monthly, April 1, 2026
- Unsafe Drinking Water at Multiple Texas Prisons Highlights Lack of Transparency, April 1, 2026
- Fourth Circuit Holds Federal Prisoner Does Not Earn First Step Act Time Credits While in Transit Between Prisons, March 1, 2026
- Missouri Judge Heavily Sanctions DOC for “Deliberate Disregard for the Authority of This Court” in Suit Over Prisoner’s Suicide, March 1, 2026
- Texas State Jails Fail: Institutions Conceived as Safe Spots for Rehabilitation After Minor Drug Convictions Now Flooded With Drugs and Major Felons, March 1, 2026
- Dissenter Excoriates SCOTUS for Denying Certiorari in Challenge to Constitutionality of Nitrogen Hypoxia Execution, Feb. 1, 2026
- D.C. Federal Court Holds Blocking Prison Reform Advocate’s Access to Federal Prisoners May Violate First Amendment and Due Process, Feb. 1, 2026
- Eleventh Circuit Holds Estate Cannot Sue Jailers Who Followed Medical Personnel Advice That Led to Detainee’s Death, Feb. 1, 2026
More from these topics:
- Survey of Arkansas Jails Reveals Strained, Costly Health Care System, April 1, 2026. Systemic Medical Neglect, Private Contractors, Medical Neglect/Malpractice, Failure to Treat (Mental Illness), Deliberate Indifference.
- Mississippi DOC Retains Law Firm to Monitor VitalCore Contract, April 1, 2026. Contractor Misconduct, Systemic Medical Neglect, Dental Care, Private Contractors, Staffing.
- Virginia Jail Suicide Results in $950,000 Settlement, Claims Against Wellpath still Pending, April 1, 2026. Private Contractors, Medical Records, Settlements, Failure to Protect (Wrongful Death), Suicides.
- Private Prison Firm GEO Group Reports Record $254 Million Profit After New ICE Contracts, March 1, 2026. Staff-Prisoner Assault, Corrections Corporation of America/CoreCivic, GEO Group/Wackenhut, Systemic Medical Neglect, Immigration Detention.
- Georgia Grand Jury Scolds Augusta Jail for Overcrowding Days Before Violent Detainee Assault, March 1, 2026. Private Contractors, Failure to Protect (General), Overcrowding, Staffing, Failure to Treat (Mental Illness).
- Illinois DOC Has Failed to Improve Prison Health Care Seven Years After Order, March 1, 2026. Systemic Medical Neglect, Private Contractors, Staffing, Consent Decrees, Deliberate Indifference.
- Missouri Pays $212M for Prison Health Care, But Prisoner Deaths Aren’t a Performance Measure, March 1, 2026. Centurion, Systemic Medical Neglect, Private Contractors, Failure to Treat, Staffing.
- Florida Sheriff Received $50,000 Donation from Jail Medical Contractor, March 1, 2026. Naphcare, Armor Correctional Health Services, Contractor Misconduct, Systemic Medical Neglect, Private Contractors.
- Report: Incarcerated Population in Rural Jails and Prisons At Risk of Losing Hospital Access, Feb. 1, 2026. Systemic Medical Neglect, Private Contractors, Transportation, Rural Prisons, Inadequate Health Care Facilities.
- Eleventh Circuit Holds Estate Cannot Sue Jailers Who Followed Medical Personnel Advice That Led to Detainee’s Death, Feb. 1, 2026. Drug/Alcohol Withdrawal, Private Contractors, Failure to Treat, Medical Neglect/Malpractice, Deliberate Indifference.

