Although the FCC’s electronic comment filing system (ECFS) experienced a distributed denial-of-service (DDoS) attack last month (TR Daily, May 8), “the system remained secure and nothing was hacked,” according to FCC Chief Information Officer David Bray. Mr. Bray’s comment on the DDoS attack was attached to a letter that the FCC released June 27 from FCC Chairman Ajit Pai to Sens. Ron Wyden (D., Ore.) and Brian Schatz (D., Hawaii). The letter, dated June 15, responded to a letter from the senators on the DDoS attack.
Mr. Pai’s letter and the CIO’s responses were referenced yesterday in a letter that House Democrats wrote the FCC and the National Cybersecurity and Communications Integration Center (NCCIC) raising concerns about the Commission’s cybersecurity preparedness in the wake of the DDoS attack (TR Daily, June 26). “We have determined that this disruption is best classified as a non-traditional DDoS attack,” Mr. Bray said in his response to questions from the senators. “Specifically, the disrupters targeted the comment filing system application programming interface (API), which is distinct from the website, and is normally used by automated programs or bots for bulk filings.” Continue reading