Data Breaches
FBI removes Accenture contractor after missed security patch led to breach
The bureau’s cyber chief blamed a contractor’s failure to apply an available fix for an intrusion that may have exposed sensitive employee information.
Pentagon personnel breach — undetected for months — renews cyber standard scrutiny
Unauthorized users accessed sensitive records for roughly nine months before discovery, exposing another government personnel data fiasco as the FBI confronts its own breach incident.
FBI warns ShinyHunters members to come forward after alleged leader’s arrest
“You know how to find us, and we know how to find you,” said Brett Leatherman, assistant director of the FBI’s Cyber Division. “I suggest you reach out first while the choice is still yours.”
ShinyHunters says it won’t publish FBI data
The group’s new statement — which called the incident a “marketing campaign" — follows reports that the stolen material includes medical records and details about employees working in sensitive intelligence roles.
ATF investigating ‘major’ cyber incident after ransomware group claim
The agency says the affected system was isolated from its broader network and eForms platform but has not disclosed whether data was stolen.
Exclusive
DHS network intrusion was twice ruled a false positive before breach confirmed
Suspicious activity on the Homeland Security Information Network, which is being used to support World Cup games around the U.S., was first detected around mid-to-late May.
House Homeland committee seeks briefing on DHS network hack
Cyber intruders accessed the unclassified network being used to help support World Cup games around the U.S., a senator said last week.
Exclusive
Hackers breached DHS information-sharing network, people familiar say
The Homeland Security Information Network is used by government, international and private sector partners to share sensitive but unclassified information.
Salt Typhoon hackers exploited stolen credentials and a 7-year-old software flaw in Cisco systems
The Chinese hacking collective has widely leveraged vulnerabilities in communications infrastructure to breach dozens of telecom providers in the U.S. and overseas.
Lawmakers request briefing from Treasury secretary on Chinese hack
The compromised third-party offering was a commercial remote services tool not listed in the marketplace for FedRAMP, the government’s cloud security compliance framework.
Chinese-sponsored hackers accessed Treasury documents in ‘major incident’
The incident comes in the final days of the Biden presidency and as officials work to root out China-tied hackers from U.S. telecommunications systems.
CISA infrastructure tool targeted in January breach, agency says
Sensitive information on the chemical security assessment platform was accessed, though it may not be up to date.
VA is warning veterans about Change Healthcare cyberattack, secretary says
“There’s no confirmation yet” that veterans’ data was leaked by the ransomware attack, according to the VA secretary, but the department is proactively alerting millions of veterans and beneficiaries to be safe.
The Pentagon is notifying individuals affected by 2023 email data breach
The exposed contents were not secured with a password at the time of their compromise.
Okta breach includes theft of data on nearly all help desk users, including some feds
The company revised its earlier reporting on the scope of the breach, but said that data on users of high-impact federal and DOD systems was not compromised.
SEC sues SolarWinds for allegedly fraudulent cybersecurity statements
The company says it will "vigorously oppose" the lawsuit.
Vacant White House cyber post draws concern amid global software breach
In the aftermath of a global cyberattack exposing personal data on millions of Americans, calls are growing for the White House to fill the top slot at the Office of the National Cyber Director.
No 'systemic risk' to government networks from latest breach, CISA says
The nation’s cyber defense agency confirmed it was providing assistance to several federal agencies that have been impacted in an apparent global cyberattack.
FTC charges Ring over 'disregard' for customer data security
The Federal Trade Commission has proposed stronger security protocols for home video surveillance company Ring after years of mounting concern over data privacy.
Lawmakers Want DHS to Assess National Security Risks of Doxing
Proposed legislation would require the Department of Homeland Security to “evaluate risks posed to national security and civilian privacy” by the online release of individuals’ personal information.
