Pentagon Discloses Data Breach, More Than 30,000 Workers Have Affected

Pentagon Discloses Data Breach of Defense Department travel records last Friday, more than 30,000 workers have been affected. The compromised data contains personal information, credit card data of U.S. military and civilian personnel.

The Pentagon official said the breach is under investigation and no classified information was compromised. The breach appeared to happen some months ago and but was only recently discovered.

According to the Pentagon statement, the breach was learned by their cybersecurity team on Oct. 4 and the department still gathering information on the size and scope of the hack reported Associated Press.

“It’s important to understand that this was a breach of a single commercial vendor that provided service to a very small percentage of the total population” of Defense Department personnel, said Buccino.

The breach involves compromise of the personnel PII that has been maintained by the vendor who provides the travel management services to Pentagon.

Buccino said that due to security reasons, the department is not identifying the vendor. He said the vendor is still under contract, but the department “has taken steps to have the vendor cease performance under its contracts.”

“The department is continuing to assess the risk of harm and will ensure notifications are made to affected personnel,” affected individuals will get updated and Pentagon to provide fraud protection services said the statement.

Last November Pentagon suffered a massive Data Leak Exposed 1.8 Billion of Social Media Surveillance Data.

AddThis Website Tools
Gurubaran

Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Recent Posts

Attackers Exploit Microsoft Entra Billing Roles to Escalate Privileges in Organizational Environments

A startling discovery by BeyondTrust researchers has unveiled a critical vulnerability in Microsoft Entra ID…

2 days ago

Threat Actors Exploit Google Apps Script to Host Phishing Sites

The Cofense Phishing Defense Center has uncovered a highly strategic phishing campaign that leverages Google…

2 days ago

Dadsec Hacker Group Uses Tycoon2FA Infrastructure to Steal Office365 Credentials

Cybersecurity researchers from Trustwave’s Threat Intelligence Team have uncovered a large-scale phishing campaign orchestrated by…

2 days ago

Beware: Weaponized AI Tool Installers Infect Devices with Ransomware

Cisco Talos has uncovered a series of malicious threats masquerading as legitimate AI tool installers,…

2 days ago

Pure Crypter Uses Multiple Evasion Methods to Bypass Windows 11 24H2 Security Features

Pure Crypter, a well-known malware-as-a-service (MaaS) loader, has been recognized as a crucial tool for…

2 days ago

Attackers Exploit Microsoft Entra Billing Roles to Escalate Privileges

A recent discovery by security researchers at BeyondTrust has revealed a critical, yet by-design, security…

2 days ago