Wednesday, May 7, 2025
HomeData BreachU.S Department of Homeland Security Data Breach Affected 246,167 Federal Government...

U.S Department of Homeland Security Data Breach Affected 246,167 Federal Government Employees

Published on

SIEM as a Service

Follow Us on Google News

DHS Office of Inspector General Case Management System Privacy incidents revealed 246,167 Federal Government Employees personal sensitive information and DNS believes that this cyber-attack not by external actors.

This incident exposed PII for these individuals includes names, Social Security numbers, dates of birth, positions, grades, and duty stations.

Data breach impact has been only affected the employees if they were employed by DHS in 2014 or associated with a DHS OIG investigation from 2002 through 2014.

- Advertisement - Google News

This unauthorized Activities found On May 10, 2017, when DHS Conduct a criminal investigation being conducted by DHS OIG and the U.S.

During this investigation, DHS OIG discovered an unauthorized copy of its investigative case management system in the possession of a former DHS OIG employee.

Also Read: TOP 10 Cyber Attacks and Critical Vulnerabilities of 2017

According to the Evidence, affected individual’s personal information was not the primary target of the unauthorized transfer of data.

This Incident has been identified in 2 group category.first group incident consists of approximately 247,167 current and former federal employees that were employed by DHS in 2014.
The second group is comprised of individuals (i.e., subjects, witnesses, and complainants) associated with DHS OIG investigations from 2002 through 2014 (the “Investigative Data”).

Based on the DHS investigation evidence this Personal information was not a primary target for the exfiltration.

In this case, DNS offered  18 months of free credit monitoring and identity protection services for all the individuals potentially affected by this privacy incident.

This service entails credit monitoring and a $1 million identity theft insurance policy and another Identity repair Policy is intended to address issues related to credit restoration or recovery of financial losses.

DNS Chief Privacy officer Philip S. Kaplan said, DHS is implementing additional security precautions to limit which individuals have access to this information and will better identify unusual access patterns.

We will continue to review our systems and practices in order to better secure data. DHS OIG has also implemented a number of security precautions to further secure the DHS OIG network.

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

Top Ransomware Groups Target Financial Sector, 406 Incidents Revealed

Flashpoint analysts have reported that between April 2024 and April 2025, the financial sector...

Agenda Ransomware Group Enhances Tactics with SmokeLoader and NETXLOADER

The Agenda ransomware group, also known as Qilin, has been reported to intensify its...

SpyCloud Analysis Reveals 94% of Fortune 50 Companies Have Employee Data Exposed in Phishing Attacks

SpyCloud, the leading identity threat protection company, today released an analysis of nearly 6...

PoC Tool Released to Detect Servers Affected by Critical Apache Parquet Vulnerability

F5 Labs has released a new proof-of-concept (PoC) tool designed to help organizations detect...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

Healthcare Sector Becomes a Major Target for Cyber Attacks in 2025

The healthcare sector has emerged as a prime target for cyber attackers, driven by...

TikTok Hit with €530 Million Fine Over Data Transfers to China

Irish Data Protection Commission (DPC) has imposed a landmark €530 million fine on TikTok...

Subscription-Based Scams Targeting Users to Steal Credit Card Information

Cybersecurity researchers at Bitdefender have identified a significant uptick in subscription-based scams, characterized by...