US sues Georgia Tech over alleged cybersecurity failings as a Pentagon contractor

The U.S. Department of Justice has intervened in a False Claims Act suit alleging that Georgia Institute of Technology and the Georgia Tech Research Corporation misrepresented compliance with DoD cybersecurity standards (NIST 800-171), including refusing to deploy anti-malware, using a “fictitious” environment to justify a near-perfect self-assessment score, and failing to maintain a compliant security plan between 2019 and 2021; the case is the first under the Civil Cyber-Fraud Initiative, and the article also highlights a separate Congressional investigation into Georgia Tech’s ties with Tianjin University in China.