The public now knows of two rounds of massive breaches at the federal agency that handles all personnel records. First round looks like it was essentially the basic personnel file of all current and many former federal employees.
Second round is the long forms used to process security clearances. Looks like it was military and spy agency records. Great. Those files list all relatives, making them vulnerable to coercion. Provides lots of ideas on how to turn or compromise employees.
Hackers meandered around the systems for a year.
If you want to build a deep profile of military, diplomatic, and spy agency staff for use over the next several decades, this would be a fantastic starting point. Will take a while to process all the files and synthesize with social media and published news reports, but those countries who wish us harm will have a superb database to track and compromise federal employees.
Continue reading “Downside of cool modern tech: Massive breach of federal personnel systems”