Researcher discovers classified Army intel app, data on open public AWS bucket
After uncovering a massive trove of social media-based intelligence left on multiple Amazon Web Services S3 storage buckets by a Defense Department contractor, the cloud security firm UpGuard has disclosed yet another major cloud storage breach of sensitive intelligence information. This time, the data exposed includes highly classified data and software associated with the Distributed Common Ground System-Army (DCGS-A), an intelligence distribution platform that DOD has spent billions to develop. Specifically, the breach involves software for a cloud-based component of DCGS-A called "Red Disk."
The Red Disk system was developed under an "urgent operational need" program aimed at delivering intelligence to troops with tablets and laptop computers on the ground in Afghanistan via a cloud computing architecture. The initiative was never fully deployed—and it slowly became a symbol of how defense contractors were mining emergency war funds from the military. DCGS-A continues to be expanded and deployed by the Army after more than a decade of continuous development.
