Dallas County, Iowa, will pay $600,000 to settle a lawsuit brought by two penetration testers they arrested in 2019. The security professionals, Gary DeMercurio and Justin Wynn, were authorized to assess courthouse security but were arrested and charged with burglary. This incident highlights the risks faced by security professionals.

The testers, employed by Coalfire Labs, had authorization for a “red-team” exercise, which includes attempting to breach security measures. Despite presenting their authorization, they were arrested by the sheriff. The charges were later dropped, but the damage was done. The situation sent a chilling message to the security industry.

The lawsuit alleged wrongful arrest and defamation, illustrating the potential legal ramifications of security assessments. The case underscores the importance of clear communication and cooperation between security professionals and law enforcement. The settlement comes just before the trial was set to begin.

This case should serve as a cautionary tale. It emphasizes the need for careful planning and coordination when conducting security audits, especially in government settings. It also highlights the importance of protecting security professionals when they are carrying out their duties. The next step will be working on improving communication.