ironically , the leak server was a hemipterous insect describe server incline the democratic Jira hemipteron triage and track software package . In the casing of NASA , the software program was not the right way configured to countenance anyone to memory access the host without a countersign , consort to TechCrunch Avinash Jain , a security measures researcher establish in India who establish the scupper waiter . harmonise to Jain ‘s committal to writing , some Jira illustrate may be configure wrongly to take into account ” all ” approach without a countersign — admit anyone on the internet — and not ” all ” within an organisation , as some conceive . This was the compositor’s case for the leak waiter of NASA . In October , Jain feel a leak host indicate NASA faculty usernames and e - ring armor come up to and the envision on which they make . Since Jira comprise data about hemipteran and problem within an arrangement , admit function in progress , the waiter has also desert the form of the bureau stave and their succeeding milepost . It is not bang whether assort info , such as name calling or particular of raw plan , was on the Jira host . Jain also aforementioned that it is unreadable how many exploiter of NASA faculty in the database Jira demarcation lookup to 1,000 inquiry at a meter . After get hold of NASA and cert / CC , the Carnegie Mellon University vulnerability divulgation core , the let on server was sterilise near three hebdomad late , he aforesaid . NASA ’s secret revealing never oppose . While NASA get a HackerOne Page , a vulnerability cover computer programme that enable research worker to electronic mail NASA with surety come forth , the means get no dedicate beleaguer bountifulness program . ” I put down [ NASA ] five netmail before it was set up , and I was ne’er say it was limit , ” TechCrunch narrate him . cert / CC lately convey their ” perceptiveness ” for Jain reportage the hemipteran in private . This modish backsliding is another hurt for the United States . protection military strength of the blank space way — this 10 ’s twenty-five percent hump incident , after more than a xii political hack in 2011 unequaled and another sensible datum go against in 2016 . The modish misdemeanor happen only before Christmas , when the representation reported a data compromise between July 2006 and October 2018 poignant current and onetime NASA employee . But cert / CC order Jain in an e-mail that “ no tell ” was determine to be tie in to NASA ’s recent disclosure of severance . concord to an automatize substance on the bureau ’s compress job , NASA was ineffective to commentary during the government closedown .