Federal cybersecurity suffered significant setbacks recently following breaches of two major agencies. The Pentagon disclosed that a monthslong compromise of a network operated by the Defense Manpower Data Center resulted in the theft of personnel records belonging to approximately 2.8 million living individuals. The stolen data contained names, Social Security numbers, addresses, demographic information, and occupational specialties, with the latter potentially useful to foreign intelligence services for identifying high-value military personnel.
This breach represents the second major incident in recent months to compromise sensitive government records. The FBI revealed last month that the ransomware group ShinyHunters had successfully infiltrated its systems and obtained records of current and former employees, including information on personnel involved in investigations related to China and Russia. While ShinyHunters stated it does not intend to release the information, law enforcement officials have expressed skepticism about such promises from criminal organizations.
FBI Cyber Division Assistant Director Brett Leatherman issued a public statement urging ShinyHunters members to surrender, citing ongoing investigation efforts and the law enforcement agency’s ability to identify and locate the perpetrators. The appeal came following the apprehension of one ShinyHunters member by Dutch authorities. Officials cautioned that criminal organizations are unlikely to maintain secure possession of sensitive data against potential theft by nation-state actors.
Together, the recent breaches represent one of the most significant potential intelligence losses since 2015, when hackers attributed to China obtained records of 22.1 million government employees and background investigation subjects. The Pentagon said the Defense Manpower Data Center maintains records on more than 60 million Defense Department personnel, including active military, civilian employees, contractors, and their family members. Department officials have not disclosed details about how the breach occurred, whether attackers demanded ransom, or whether they have established contact with those responsible.
Article Attribution | Read More at Article Source
Article summary produced by Claude AI