Former Florida Probation Officer Charged with Leaking Sensitive Data to Drug Traffickers
A former Florida Department of Juvenile Justice (DJJ) probation officer, Crystal Lawson, 32, has been arrested and faces 114 felony charges after allegedly exploiting retained access to a state court records system to tip off a drug trafficking organization. Lawson, hired in February 2022, was terminated eight months later following a battery arrest but her access to the Comprehensive Case Information System (CCIS) was never revoked.
Between January and May 2026, investigators say Lawson logged into the database 106 times, searching for active criminal cases and leaking details including arrest warrants to suspects. The breaches reportedly led to lost evidence, unrecovered assets, and at least one suspect evading arrest (though the individual was later apprehended).
Lawson appeared in court on Friday, where a judge set her bond at $10,000 per count, totaling over $1.1 million a sum her defense argued was unaffordable. The judge denied a request for reduced bond, leaving Lawson detained in Orange County Jail. If convicted on all counts, she could face up to 570 years in prison.
Cybersecurity expert Jonathan Hochman highlighted critical failures in the DJJ’s security protocols, including:
- Over-privileged access: Lawson had unrestricted database access rather than case-specific permissions.
- Improper offboarding: IT and HR failed to revoke her credentials post-termination.
- Lack of monitoring: The four-year gap between her firing and the breach’s discovery suggests inadequate access log reviews.
Hochman noted that daily security reports on database access could have flagged suspicious activity sooner. The DJJ has not responded to inquiries about whether it is revising its security measures in light of the incident.
Florida State University College of Criminology & Criminal Justice cybersecurity rating report: https://www.rankiteo.com/company/florida-state-university-college-of-criminology-criminal-justice
"id": "FLO1781915360",
"linkid": "florida-state-university-college-of-criminology-criminal-justice",
"type": "Breach",
"date": "1/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Suspects in criminal cases, law '
'enforcement operations',
'industry': 'Public Sector / Law Enforcement',
'location': 'Florida, USA',
'name': 'Florida Department of Juvenile Justice (DJJ)',
'type': 'Government Agency'}],
'attack_vector': 'Exploiting retained access to internal systems',
'data_breach': {'data_exfiltration': 'Yes (leaked to drug traffickers)',
'personally_identifiable_information': 'Yes (suspect details)',
'sensitivity_of_data': 'High (law enforcement sensitive)',
'type_of_data_compromised': 'Criminal case records, arrest '
'warrants, suspect details'},
'date_detected': '2026-05',
'description': 'A former Florida Department of Juvenile Justice (DJJ) '
'probation officer, Crystal Lawson, was arrested and faces 114 '
'felony charges after allegedly exploiting retained access to '
'a state court records system to tip off a drug trafficking '
'organization. Lawson leaked details including arrest warrants '
'to suspects, leading to lost evidence, unrecovered assets, '
'and at least one suspect evading arrest.',
'impact': {'brand_reputation_impact': 'Negative impact on Florida Department '
'of Juvenile Justice (DJJ)',
'data_compromised': 'Active criminal cases, arrest warrants, '
'suspect details',
'legal_liabilities': '114 felony charges, potential fines, legal '
'actions',
'operational_impact': 'Lost evidence, unrecovered assets, suspects '
'evading arrest',
'systems_affected': 'Comprehensive Case Information System (CCIS)'},
'investigation_status': 'Ongoing (arrest made, trial pending)',
'lessons_learned': 'Critical failures in security protocols, including '
'over-privileged access, improper offboarding, and lack of '
'monitoring. Daily security reports on database access '
'could have flagged suspicious activity sooner.',
'motivation': 'Assisting a drug trafficking organization',
'post_incident_analysis': {'root_causes': ['Over-privileged access to CCIS',
'Improper offboarding (credentials '
'not revoked)',
'Lack of monitoring for suspicious '
'access']},
'recommendations': ['Implement case-specific permissions instead of '
'unrestricted access',
'Ensure proper offboarding procedures to revoke '
'credentials post-termination',
'Enhance monitoring of access logs to detect suspicious '
'activity',
'Conduct regular security audits'],
'references': [{'source': 'Cybersecurity expert Jonathan Hochman'}],
'regulatory_compliance': {'legal_actions': '114 felony charges'},
'response': {'enhanced_monitoring': 'Potential future implementation (not '
'confirmed)',
'law_enforcement_notified': 'Yes'},
'threat_actor': 'Crystal Lawson (former probation officer)',
'title': 'Former Florida Probation Officer Charged with Leaking Sensitive '
'Data to Drug Traffickers',
'type': 'Insider Threat',
'vulnerability_exploited': 'Over-privileged access, improper offboarding, '
'lack of monitoring'}