Former Florida Probation Officer Charged with Leaking Sensitive Data to Drug Traffickers A former Florida Department of Juvenile Justice (DJJ) probation officer, Crystal Lawson, 32, has been arrested and faces 114 felony charges after allegedly exploiting retained access to a state court records system to tip off a drug trafficking organization. Lawson, hired in February 2022, was terminated eight months later following a battery arrest but her access to the Comprehensive Case Information System (CCIS) was never revoked. Between January and May 2026, investigators say Lawson logged into the database 106 times, searching for active criminal cases and leaking details including arrest warrants to suspects. The breaches reportedly led to lost evidence, unrecovered assets, and at least one suspect evading arrest (though the individual was later apprehended). Lawson appeared in court on Friday, where a judge set her bond at $10,000 per count, totaling over $1.1 million a sum her defense argued was unaffordable. The judge denied a request for reduced bond, leaving Lawson detained in Orange County Jail. If convicted on all counts, she could face up to 570 years in prison. Cybersecurity expert Jonathan Hochman highlighted critical failures in the DJJ’s security protocols, including: - Over-privileged access: Lawson had unrestricted database access rather than case-specific permissions. - Improper offboarding: IT and HR failed to revoke her credentials post-termination. - Lack of monitoring: The four-year gap between her firing and the breach’s discovery suggests inadequate access log reviews. Hochman noted that daily security reports on database access could have flagged suspicious activity sooner. The DJJ has not responded to inquiries about whether it is revising its security measures in light of the incident.