False Arrest Ruined Their Lives. Their Revenge Could Change the Law ⚖ 179: The Courthouse Revisited
Source: YouTube · Jack Rhysider · published Sep 1, 2026 · 1:34:50
Two penetration testers legally hired by the Iowa State Judicial Branch were wrongfully arrested for burglary while testing courthouse security, spent months fighting felony charges, and ultimately sued the county—winning a $600,000 settlement that sets a new precedent for the cybersecurity industry 7:00-7:34.
Key Takeaways:
• Justin Wyn and Gary Deario (now Gabby) were contracted by the Iowa judicial branch for a full-scope physical penetration test across five locations, with a signed "get out of jail free" card listing their state contacts 10:07-10:30.
• At the Dallas County Courthouse, they found the front door accidentally unlocked with a faulty alarm, but after properly bypassing it and triggering the alarm, the arriving sheriff insisted they had no authorization despite deputies verifying their paperwork 27:00-28:02.
• The sheriff ordered them arrested for burglary, the judge called their story ridiculous and set bail at $50,000 each, and their state contacts completely ghosted them at the hearing 48:00-50:00.
• After charges were dropped months later, they discovered qualified and sovereign immunity shielded nearly everyone responsible, leaving them only able to sue the sheriff's position rather than the individual 1:17:36-1:18:05.
• After years of delays, the county settled for $600,000 just before trial—an extraordinarily rare outcome for a single-night wrongful arrest lawsuit, establishing meaningful precedent protecting penetration testers 1:32:34-1:33:27.
This case highlights the dangerous gap between legitimate cybersecurity work and local law enforcement awareness, and proves that fighting back against systemic injustice can yield real results.
Sources:
- 7:00-7:34 Introduction to the Iowa courthouse penetration testing story and update
- 10:07-10:30 Rules of engagement and scope of the five-location penetration test
- 27:00-28:02 Finding the front door unlocked, bypassing it properly, and the alarm response
- 48:00-50:00 The court hearing where the judge dismisses their story and sets $50,000 bail
- 1:17:36-1:18:05 Discovery of qualified and sovereign immunity blocking lawsuits against individuals
- 1:32:34-1:33:27 The $600,000 settlement and its significance as industry precedent
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Penetration Testing. Commonly maps to: Security Assessment and Testing, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
I just came back from Defcon and it was so wonderful meeting so many of the listeners there. Many of you asked how my dad is doing and I'll tell you he's struggling with the modern world. Let me show you what I mean. So, like I call my dad a few times a week just to check in on him, but um he only calls me when he's got computer problems. Let me play for you what one of these calls sounds like. >> Okay. So, anytime I get a photo or if I want to save it, there's like uh three little dots top right corner. >> Yeah. >> Saving a photo. And I hit the dots because I want to save the photo. It used to say save. [clears throat] Now it says save to account. So, I'm clicking on that. save to account but the count is something called one drive. I don't Oh, it says add account. How do I add an account…