Learn
active
US Customs supervisor stole CPUs/RAM from DHS PCs, sold on Newegg
- Engineer — Skip
- SOC/IR — Learn: A concrete insider-threat case involving hardware substitution that evaded detection — useful context for thinking about physical asset integrity controls and insider detection gaps, though no IOCs or detection rules apply here.
- Leader — Learn: Illustrates insider-threat risk from privileged physical access; useful as a reference case when reviewing asset inventory controls or briefing leadership on insider-threat program gaps.
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.