Two significant cybersecurity breaches have compromised sensitive information held by U.S. federal agencies over the past month, prompting concerns about espionage risks and national security vulnerabilities.
The Department of Defense disclosed that hackers gained access to systems operated by the Defense Manpower Data Center beginning last October, exposing personnel records belonging to approximately 2.8 million living individuals. The stolen data included Social Security numbers, names, addresses, demographic information, and occupational specialties. Military officials note that occupational details may be particularly valuable to foreign intelligence services seeking to identify high-value targets within the armed forces. The Pentagon has notified affected current and former service members of the breach but has not disclosed how attackers penetrated its security infrastructure or whether ransom demands were made. The department stated that no evidence of data misuse has emerged, though officials have not detailed their methodology for reaching this conclusion.
This incident follows an earlier breach at the Federal Bureau of Investigation, where the ransomware group ShinyHunters claimed responsibility for stealing records of thousands of current and former agency employees. According to reporting, the stolen files included job titles related to investigations targeting China and Russia. While ShinyHunters has stated it does not intend to release the information, cybersecurity experts note that such assurances from criminal organizations hold limited weight. The group’s defensive capabilities may also prove vulnerable to nation-state actors. An FBI official recently called on group members to surrender themselves to authorities, warning that law enforcement continues gathering intelligence on perpetrators.
Taken together, the recent breaches represent one of the most substantial potential foreign intelligence acquisitions since the 2015 compromise of the Office of Personnel Management, during which state-sponsored Chinese hackers obtained approximately 22.1 million records. That previous incident exposed extensive personal data, including fingerprints of millions of individuals. The Defense Manpower Data Center manages more than 60 million records encompassing military personnel, civilians, contractors, retirees, veterans, and their family members, underscoring the scale of potential exposure from current security failures.
Article Attribution | Read More at Article Source
Article summary produced by Claude AI