What should be done about this latest security breach? ...our nation's dams....

Looks like pretty common and simple tradecraft, otherwise known as spying. Soviets used to do it, Russians do it now. Chinese have been doing it for decades. Why is anyone surprised at this?

interesting article. Looks like someone granted access and permissions that should not have been granted, so they need to assess that aspect also. Unless they prove that it was done for profit/espionoge etc, they may have a hard time pressing charges. Let's face it, if any one of us found we had access to something like that, would it not be interesting to learn something like that??!! I know I could find it interesting. And for me, it would only be Gee Whiz!! If it is something that really needs to be secured, then, maybe this info needs to be stored differently (SIPR?).

SGM,

Firstly, I would say a thorough investigation needs to be completed. Thorough, in this case, meaning they absolutely need to discover if this employee was acting on behalf of a foreign entity or not. It seems to be already determined that the employee did, in fact, commit the act, and punishment should hinge on the findings of the investigation.

If they can find no connection to China, or any other foreign entity, they should rule that the breech was due to either negligence, or incompetence on behalf of the employee/s, whom should certainly lose their jobs, in my opinion, and be punished in accordance with any laws that may govern this type of crime. However, should they find she specifically was attempting to aid a foreign entity, then the case would enter the realm of espionage, a completely different animal.

Either way, it appears that the government needs to better protect this sensitive information. Data pertaining to a critical part of our infrastructure should only be accessible to personnel whose positions require it, not to those who merely stumble upon it because it's there, and certainly not those who would use it for criminal purposes.