Federal government agencies have experienced significant cybersecurity incidents during recent weeks, with two major breaches exposing sensitive personnel information. The Department of Defense announced that attackers compromised a network operated by the Defense Manpower Data Center, resulting in unauthorized access to records belonging to approximately 2.8 million living individuals. The stolen data included personal identifiers such as Social Security numbers, names, addresses, biological information, and occupational specialties. The latter category poses particular concern, as it could enable foreign intelligence agencies to identify military personnel of strategic value.
The Defense Manpower Data Center operates systems containing more than 60 million personnel records across the Defense Department, encompassing active military, civilian employees, contractors, retirees, veterans, and their family members. The compromise lasted several months before discovery. Pentagon officials have not disclosed the methods used to gain access, whether communications occurred with those responsible, or if ransom requests were made. Although Department representatives stated that the compromised data has not been misused, they provided no explanation for how this determination was made.
This incident represents the second major breach of federal personnel records in recent weeks. Last month, a ransomware organization known as ShinyHunters claimed responsibility for accessing FBI systems and obtaining employment records of current and former agency personnel. The stolen FBI records reportedly included job titles related to investigations concerning specific foreign nations. ShinyHunters stated it does not intend to release the information publicly, though statements from criminal organizations carry minimal credibility. The group’s security infrastructure may prove vulnerable to nation-state cyber operations.
FBI Cyber Division leadership responded to the ShinyHunters breach by issuing a public appeal to group members to surrender to authorities. An assistant director emphasized that investigators continue developing intelligence about the group’s activities. Dutch law enforcement apprehended one ShinyHunters member, supporting claims of investigative progress. Together, these recent breaches constitute one of the most significant potential espionage incidents since a 2015 compromise of the US Office of Personnel Management, when state-sponsored hackers obtained approximately 22.1 million records containing comprehensive personal information and biometric data.
Article Attribution | Read More at Article Source
Article summary produced by Claude AI