Personally identifiable information belonging to thousands of U.S. Department of Homeland Security employees has been published online after a hacker stole reams of data in a previously undisclosed breach at the government department earlier this year.
The breach includes names, job titles, and work contact information, such as email addresses, cell phone numbers, and office locations, of more than 40,000 people who work for the federal department, including border and immigration agents, cybersecurity staffers, and senior department officials.
A hacker who goes by the handle Department of Peace claimed they obtained the data from an Okta single sign-on system used by Homeland Security to allow employees and contractors across its various agencies to log in to its central network. The Okta system also contains IT and log-in records associated with the employees’ user account, including details about which systems and internal apps they are permitted to access.
Read more…
Source: TechCrunch News
Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox
Related:
- Google Lifts Self-Imposed Ban on Using AI for Weapons and Surveillance
February 5, 2025
Google dropped a pledge not to use artificial intelligence for weapons and surveillance systems on Tuesday. And it’s just the latest sign that Big Tech is no longer concerned with the potential blowback that can come when consumer-facing tech companies get big, lucrative contracts to develop police surveillance tools and weapons of war. Google came under ...
- Grubhub confirms data breach, both drivers and customers are affected
February 4, 2025
Grubhub, the food delivery service, has been hacked. On Monday, the company confirmed a data breach that affects both its drivers and customers. According to Grubhub, the malicious actor was able to gain entry into its systems via a third-party vendor that provides services for Grubhub’s support team. The hacker was able to access private information connected ...
- Spyware maker Paragon confirms US government is a customer
February 4, 2025
Israeli spyware maker Paragon Solutions confirmed to TechCrunch that it sells its products to the U.S. government and other unspecified allied countries. Paragon’s executive chairman John Fleming said in a statement to TechCrunch on Tuesday that “Paragon licenses its technology to a select group of global democracies — principally, the United States and its allies.” Fleming ...
- Deloitte to provide Rhode Island $5 million toward data breach aftermath expense
February 4, 2025
Deloitte will provide Rhode Island with $5 million to go toward paying expenses related to the RIBridges data breach that took place in December of 2024. Separately, Deloitte will also cover the cost of the data breach call center, credit monitoring for affected Rhode Islanders and identity protection, according to a statement from Rhode Island Governor ...
- Gov. Abbott looks to combat cyber attacks with Texas Cyber Command
February 3, 2025
Gov. Greg Abbott announced plans to create a Texas Cyber Command to be headquartered in San Antonio during his annual State of the State address Sunday evening. The Texas Cyber Command would create a strategy for the state to address cyber security concerns. Abbott said in his address Sunday that with increases in cyber attacks nationwide, ...
- USAID security leaders removed after refusing Elon Musk’s DOGE employees access to secure systems
February 2, 2025
The U.S. Agency for International Development’s director of security and his deputy were placed on administrative leave Saturday after they tried to prevent employees from the Department of Government Efficiency from accessing secure USAID systems, five sources familiar with the events told NBC News. The USAID systems the DOGE team tried to access included personnel files ...