Dutch govt says neglect possible at DigiNotar

AMSTERDAM (AP) ? Dutch prosecutors say they are investigating Internet security firm DigiNotar for possible criminal negligence after it was slow to disclose a hacking incident that compromised dozens of websites and likely helped the Iranian government spy on dissidents for a month.

DigiNotar, a subsidiary of Chicago-based Vasco Inc., did not return phone calls seeking comment. Spokesman Ernst Koeman of the Netherlands’ national prosecutor’s office said Tuesday the investigation is in a preliminary phase.

A review by external Information Technology experts funded by the Dutch government and published Monday found that DigiNotar ? whose business is security ? used weak passwords, failed to update software on public servers and had no antivirus protection on internal servers.