“According to the lawsuit, the lab didn’t install anti-malware software on devices, and that the university and affiliate company submitted a false cybersecurity assessment score to the Pentagon.”
Georgia Tech’s Astrolavos Lab ran without a required system security plan until at least February 2020, and the one it finally wrote left out covered laptops, desktops and servers. Two members of the school’s own cybersecurity team blew the whistle in 2022. DOJ is using the Civil War-era False Claims Act. Georgia Tech’s defense is that nothing leaked, which is not the same as having done the security it certified.