Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data
Executive Take
Two major US government breaches in one month show that even agencies with top security budgets can't protect personnel data. Any company holding employee records tied to national security clearances or sensitive roles should assume it's a target too.
Executive Summary
The Pentagon is notifying over 2 million current and former military members that hackers stole personnel records from the Defense Manpower Data Center, starting last October. Stolen data includes Social Security numbers, names, addresses, sex, race, and occupational specialty, affecting 2.8 million living individuals. This follows a similar FBI records breach last month claimed by ransomware group ShinyHunters.
Why It Matters
Technology and cybersecurity leaders should note that occupational data, not just Social Security numbers, is now a prime target for identifying high-value personnel. HR leaders managing sensitive employee records anywhere in government or defense supply chains face similar exposure risk.