30-Year Security Flaw in US May Have Exposed DNA Case Files

A significant security vulnerability has been uncovered in the digital file format used by most forensic laboratories in the United States for DNA analysis. Researchers found that files containing DNA analysis results can be altered without leaving any detectable trace, potentially compromising digital evidence in criminal cases.

The vulnerability affects a file format that has been in use since 1995, meaning that digital evidence in criminal cases spanning over three decades could be susceptible to undetected manipulation. According to a report in The Wall Street Journal, a team of experts in forensic and computer science successfully modified data derived from scanned physical DNA samples. Crucially, these digital alterations left no visible signs of tampering or modification in the digital records.

Researchers developed the necessary code for their experiment using publicly available artificial intelligence tools. While the physical DNA samples themselves remain unaltered and can be re-analyzed, the integrity of the digital results derived from them is now in question. These digital results are typically used to create profiles, compare evidence from crime scenes with suspect samples, and prepare reports for court proceedings.

Experts emphasize that while they have not found any confirmed instances of evidence being altered in actual criminal cases, the discovery demonstrates the possibility of undetectable interference. The vulnerability specifically targets the digital representation of DNA analysis results, often presented in electropherogram format, rather than the physical samples. This finding raises serious concerns about the reliability of digital forensic data used in the justice system.