Case Study

Password Manager Helps
Defend U.S. District Court
Against Cyberattacks

A court storing critical trial and personal data needed a secure
way to manage passwords for employees who all have multiple
online accounts and devices.

Challenge• U
 .S. District Court employees with 20+ accounts requiring passwords• C ourts responsible for their own cybersecurity, including password managementSolution• Password manager and digital vault• Z ero-knowledge architecture• 2FA protection against unauthorized access• Password vault access via mobile devicesResults• Password security visibility• P assword policy enforcement• Seamless integration with existing systems© 2019 Keeper Security, Inc.

2

About The U.S. District Court for theEastern District of New York
There are 94 district courts and two special trial courtsin the U.S. federal court system. The U.S. District Court
for the Eastern District of New York has 26 Article III
Judges and 16 Magistrate Judges. They serve eight
million residents in the counties of Kings, Nassau,Queens, Richmond and Suffolk, and concurrently withthe Southern District, the waters in Bronx and New
York counties.

The Challenge
District courts in the U.S. are responsible for their own
cybersecurity. Amid increasing cyberattack risks, theAdministrative Office of the U.S. Courts (AO) encourages
district courts to identify and address their information
technology (IT) security vulnerabilities. Among thesevulnerabilities are weak or stolen employee passwords.
In the U.S. District Court for the Eastern District of New
York (EDNY), the typical court employee has more than
20 accounts requiring login passwords. They also havean average of four devices, which further complicates
online account management. Many times, EDNY judges
and other employees were using the same passwords
at home that they used in the office, which meant acybercriminal who compromised one account could
gain access to all of them.

The Keeper Solution
As someone with 300+ accounts that require
passwords, Doug was well aware of the potential risks
he and his staff faced. He stays one step ahead by
studying industry best practices, trends and emerging
threats, which led him to use the personal version
of Keeper’s password manager to protect his owninformation. Seeing how well it worked, he deployed
the business version for his EDNY employees.
“Not only do courts store valuable personallyidentifiable information, we store sealed case files
that must be protected,” said Doug. “These files
have critical information, such as the identities oftrial witnesses, plus a great deal of personal andoperational information we must guard very closely.
I truly believe a proper password management
solution is integral to an effective security posture.
The Keeper solution met all our criteria.”
I truly believe a proper password
management solution is integral toan effective security posture.

The typicalcourt employee
hasthanmore thanThe typicalcourt employee
has more
20 accounts
requiringlogin passwords.
20 accounts
requiringlogin passwords.
“The data breach epidemic, particularly the 2015 attackon the U.S. Office of Personnel Management, woke us up
to the threat,” said Doug Palmer, EDNY Clerk of Court,
who oversees information security and IT. “Since theAO had not yet established password management bestpractices, the courts were left to find a solution onour own.”© 2019 Keeper Security, Inc.

3

The Results

About Keeper

Keeper brought immediate benefits to EDNY, including
greater visibility into organizational password security,
more control over password policy enforcement, accountrevocation capabilities and nearly universal client andbrowser support. Keeper’s zero-knowledge architecture
ensures no one but the user can access their data, notjust at the office, but wherever they work. EDNY also
implemented Keeper’s two-factor authentication (2FA)from DUO Security as an extra layer of protection.
Keeper integration with Microsoft Active Directory,
which Doug’s team uses to manage devices on thenetwork, was seamless.

Keeper Security develops leading password manager
and security software for protecting businesses andclient information. Keeper works with companies ofall sizes across every industry to mitigate the riskof data breaches, bolster data security and privacy,
increase employee productivity and strengthen
cybersecurity reporting and compliance.
To learn more about Keeper Security’s leading
password manager and security software, visit
keepersecurity.com.

The Impact
U.S. District Courts are part of the federal judiciary
system that resolves disputes by determining facts
and applying legal principles to decide who is right.
Information flowing in and out of the court system isvital to this process and must be protected from data
breaches. Keeper helped EDNY close a vulnerability gap
created by weak passwords, which leads to more than
80% of data breaches. 1
Keeper helped EDNY close a vulnerability
gap created by weak passwords, whichlead to more than 80% of data breaches.

Business Sales
Americas & APAC

Germany & DACH

EMEA

Iberia & Italy+1 312 829 2680

+49 89 143772993+353 21 229 6011

+34 919 01 65 13

United Kingdom

IrelandNetherlands

Sweden & Nordics+44 20 3405 8853

+353 21 229 6020

+31 20 262 0932

+46 8 403 049 28

1Verizon Data Breach Investigations Report, 2017

REV 6.27.19 © 2019 Keeper Security, Inc.

4