Hack: Personal data for millions of Fed employees stolen

[BDKJMU]

"Washington (CNN)Four million current and former federal employees may have had their personal information hacked, the Office of Personnel Management said on Thursday.

The agency, which is conducts background checks, warned it was urging potential victims to monitor their financial statements and obtain new credit reports.

U.S. officials believe this could be the biggest breach ever of the government's computer networks.

The breach is beyond the Office of Personnel Management and Department of Interior, with nearly every federal government agency hit by the hackers, government officials said.

An assessment continues and it is possible millions more government employees may be impacted.

American investigators believe they can trace the breach to the Chinese government. Hackers working for the Chinese military are believed to be compiling a massive database of Americans, intelligence officials told CNN on Thursday night........"
http://www.cnn.com/2015/06/04/politics/ ... index.html" onclick="window.open(this.href);return false;

[BDKJMU]

It seems like every month we're hearing about some massive data breach. Big box stores like Target in laste 13', large health insurers like Anthem last year, the IRS, Fed OPM, on and on. Prime example of why personal data shouldn't be stored online...

[HI54UNI]

This is the reason I refuse to fill out the American Community Survey the Census Bureau sent me. They keep calling to get me to fill it out. They insist the information will remain confidential.

[BDKJMU]

Is this the most serious hack against the US ever up to date? What kind of retaliation should be taken against the Chinese? Will Obama do anything?

[CID1990]

Turn off their Internet.

End of problem.

[Ivytalk]

"Hey, Mistah 93, I have your birth date and Social! Me so Hawny! Gonna love you long time! Text me back!" -- Mei Ling Twat

[kalm]

How many threads do we need about this? BDK, you should create one that consolidates the discussion and quit clogging up the interwebs.

http://www.championshipsubdivision.com/ ... =9&t=43268" onclick="window.open(this.href);return false;

[BDKJMU]

How many threads do we need about this? BDK, you should create one that consolidates the discussion and quit clogging up the interwebs.

http://www.championshipsubdivision.com/ ... =9&t=43268" onclick="window.open(this.href);return false;

I looked at both the Poli and Locker Room prior to starting this one and saw no thread title that said anything about a hack/data breach. I don't click on most Locker room threads. 'Heads up 93' doesn't indicate a thread about the largest data breach of personal info in U.S. History. If people don't want multiple threads on a subject, they should put in the thread title what the thread is about.

[GannonFan]

At this point, it's almost statistically impossible, given the number and size of these hacks, for someone's personal data not to have been stolen at some point in time. How much new data could they have stolen in this case?

Frankly, I don't think the Chinese are behind this. Whenever one of these breaches happen, the response is always to give the people affected one-year worth of credit monitoring. Since I'm sure those businesses aren't doing that credit monitoring for free, I would start looking there first. Maybe they're doing the hacks to create business. Where's expandsos when you need him?

[Grizalltheway]

How many threads do we need about this? BDK, you should create one that consolidates the discussion and quit clogging up the interwebs.

http://www.championshipsubdivision.com/ ... =9&t=43268" onclick="window.open(this.href);return false;

I looked at both the Poli and Locker Room prior to starting this one and saw no thread title that said anything about a hack/data breach. I don't click on most Locker room threads. 'Heads up 93' doesn't indicate a thread about the largest data breach of personal info in U.S. History. If people don't want multiple threads on a subject, they should put in the thread title what the thread is about.

Or maybe you shouldn't be such a twat to people who start a thread because they didn't see one.

[CID1990]

At this point, it's almost statistically impossible, given the number and size of these hacks, for someone's personal data not to have been stolen at some point in time. How much new data could they have stolen in this case?

Frankly, I don't think the Chinese are behind this. Whenever one of these breaches happen, the response is always to give the people affected one-year worth of credit monitoring. Since I'm sure those businesses aren't doing that credit monitoring for free, I would start looking there first. Maybe they're doing the hacks to create business. Where's expandsos when you need him?

It was China, bubba

[BDKJMU]

In the last yr and a half have had numerous massive data breaches affecting hundreds of thousands to millions at each incident. Target, OPM contractor, Anthem Blue Cross , IRS, Like I said, sensitive personal info shouldn't be stores online. Not all personal info, just stuff like DOBs, SS #s, medical records, CC info, employee info if in the military, law enforcement, or any govt job that requires a S or TS clearance, etc. Can't hack paper files. Someone could steal 4, or 40, or 400. Ain't getting 4 million.

Laws need to be re written making it easier for class action lawsuits to hammer these businesses and govt entities with piss poor IT security that have data breaches. Make it so expensive to suffer a data breach (say 10k per victim) that companies would be forced to either do massive hardening of IT systems to to the highest levels, or take sensitive personal info offline.

[BDKJMU]

Out yesterday news of a 2nd hack separate from the one announced last week that hit a security clearance database of people getting TS clearances. And the hack reported last week is apparently far worse than initially reported...

"...In the hack of standard personnel records announced last week, two people briefed on the investigation disclosed Friday that as many as 14 million current and former civilian U.S. government employees have had their information exposed to hackers, a far higher figure than the 4 million the Obama administration initially disclosed."
http://www.foxnews.com/politics/2015/06 ... l-records/" onclick="window.open(this.href);return false;

[93henfan]

I really can't sleep at night knowing the Chinese now know that I used to buy things for the gubmint and now I make the rules for people who buy things for the gubmint.

[CID1990]

I cant wait until the zipperheads try to figure out how my grandma is named Clyde and my dad's name is Allison

[Grizalltheway]

They'll see your place of birth and it'll all make sense.

[CID1990]

They'll see your place of birth and it'll all make sense.

someone less stupid than you would infer that I'm Scottish

at least the ching chongs have a cultural excuse

[Grizalltheway]

I think the Chinks will be smart enough to figure out that those are their surnames, not their given ones.

And I bet actual Scottish people think it's hilarious when you tell them you're Scottish.

[BDKJMU]

And to only provide identity protection services for 18 months for these 14 million folks is an absolute joke. So all of a sudden at 19 months the issue goes away? It should be for a lot of years if not life.

Wonder if there is grounds for a class action here? With a database that contained personal and sensitive info on so many people anything less than the highest level IT security possible, something you have at the highest levels of the Pentagon/NSA (which obviously wasn't being done) would seem like gross negligence. 14 million people times X amount of $$ could be a ginormous sum....

[CID1990]

I think the Chinks will be smart enough to figure out that those are their surnames, not their given ones.

And I bet actual Scottish people think it's hilarious when you tell them you're Scottish.

just because you can only narrow your father down to five likely candidates doesnt mean you should denigrate others

[houndawg]

In the last yr and a half have had numerous massive data breaches affecting hundreds of thousands to millions at each incident. Target, OPM contractor, Anthem Blue Cross , IRS, Like I said, sensitive personal info shouldn't be stores online. Not all personal info, just stuff like DOBs, SS #s, medical records, CC info, employee info if in the military, law enforcement, or any govt job that requires a S or TS clearance, etc. Can't hack paper files. Someone could steal 4, or 40, or 400. Ain't getting 4 million.

Laws need to be re written making it easier for class action lawsuits to hammer these businesses and govt entities with piss poor IT security that have data breaches. Make it so expensive to suffer a data breach (say 10k per victim) that companies would be forced to either do massive hardening of IT systems to to the highest levels, or take sensitive personal info offline.

Yewah! That's what we need, more government!

[93henfan]

I'm not able to share this one, but we got another email stating that things are a lot worse than originally thought.

Without naming names, one of the companies that a certain agency uses to conduct background checks and credit checks was also hacked.

[89Hen]

Mrs89 got the letter in the mail on Saturday stating she was one of the 4M.

[CID1990]

I'm not able to share this one, but we got another email stating that things are a lot worse than originally thought.

Without naming names, one of the companies that a certain agency uses to conduct background checks and credit checks was also hacked.

its a goddamned mess and DoS is slow walking the bad news

the love letter to hackers in this blog post is HI larious

http://diplopundit.net/2015/06/15/1-mor ... it-freeze/" onclick="window.open(this.href);return false;

[BDKJMU]

Mrs89 got the letter in the mail on Saturday stating she was one of the 4M.

14M...