Categories: Data Breach

U.S Department of Homeland Security Data Breach Affected 246,167 Federal Government Employees

DHS Office of Inspector General Case Management System Privacy incidents revealed 246,167 Federal Government Employees personal sensitive information and DNS believes that this cyber-attack not by external actors.

This incident exposed PII for these individuals includes names, Social Security numbers, dates of birth, positions, grades, and duty stations.

Data breach impact has been only affected the employees if they were employed by DHS in 2014 or associated with a DHS OIG investigation from 2002 through 2014.

This unauthorized Activities found On May 10, 2017, when DHS Conduct a criminal investigation being conducted by DHS OIG and the U.S.

During this investigation, DHS OIG discovered an unauthorized copy of its investigative case management system in the possession of a former DHS OIG employee.

Also Read: TOP 10 Cyber Attacks and Critical Vulnerabilities of 2017

According to the Evidence, affected individual’s personal information was not the primary target of the unauthorized transfer of data.

This Incident has been identified in 2 group category.first group incident consists of approximately 247,167 current and former federal employees that were employed by DHS in 2014.
The second group is comprised of individuals (i.e., subjects, witnesses, and complainants) associated with DHS OIG investigations from 2002 through 2014 (the “Investigative Data”).

Based on the DHS investigation evidence this Personal information was not a primary target for the exfiltration.

In this case, DNS offered  18 months of free credit monitoring and identity protection services for all the individuals potentially affected by this privacy incident.

This service entails credit monitoring and a $1 million identity theft insurance policy and another Identity repair Policy is intended to address issues related to credit restoration or recovery of financial losses.

DNS Chief Privacy officer Philip S. Kaplan said, DHS is implementing additional security precautions to limit which individuals have access to this information and will better identify unusual access patterns.

We will continue to review our systems and practices in order to better secure data. DHS OIG has also implemented a number of security precautions to further secure the DHS OIG network.

Balaji

BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Recent Posts

Threat Actors Exploit Google Docs And Weebly Services For Malware Attacks

Phishing attackers used Google Docs to deliver malicious links, bypassing security measures and redirecting victims…

6 hours ago

Python NodeStealer: Targeting Facebook Business Accounts to Harvest Login Credentials

The Python-based NodeStealer, a sophisticated info-stealer, has evolved to target new information and employ advanced…

6 hours ago

XSS Vulnerability in Bing.com Let Attackers Send Crafted Malicious Requests

A significant XSS vulnerability was recently uncovered in Microsoft’s Bing.com, potentially allowing attackers to execute…

9 hours ago

Meta Removed 2 Million Account Linked to Malicious Activities

 Meta has announced the removal of over 2 million accounts connected to malicious activities, including…

12 hours ago

Veritas Enterprise Vault Vulnerabilities Lets Attackers Execute Arbitrary Code Remotely

Critical security vulnerability has been identified in Veritas Enterprise Vault, a widely-used archiving and content…

13 hours ago

7-Zip RCE Vulnerability Let Attackers Execute Remote Code

A critical security vulnerability has been disclosed in the popular file archiving tool 7-Zip, allowing…

13 hours ago