Official says hackers hit up to 25,000 US workers

August 23, 2014 by Stephen Braun

The internal records of as many as 25,000 Homeland Security Department employees were exposed during a recent computer break-in at a federal contractor that handles security clearances, an agency official said Friday.

The official, who spoke on condition of anonymity to discuss details of an incident that is under active federal criminal investigation, said the number of victims could be greater. The department was informing employees whose files were exposed in the hacking against contractor USIS and warning them to monitor their financial accounts.

Earlier this month, USIS acknowledged the break-in, saying its internal cybersecurity team had detected what appeared to be an intrusion with "all the markings of a state-sponsored attack." Neither USIS nor government officials have speculated on the identity of the foreign government. A USIS spokeswoman reached Friday declined to comment on the DHS notifications.

USIS, once known as U.S. Investigations Services, has been under criticism in Congress in recent months for its performance in conducting background checks on National Security Agency systems analyst Edward Snowden and on Aaron Alexis, a military contractor employee who killed 12 people during shootings at the Navy Yard in Washington in September 2013.

Private contractors perform on more than two-thirds of the 4.9 million government workers with clearances, and USIS handles nearly half of that number. Many of those investigations are performed under contracts with the Office of Personnel Management, and the Homeland Security and Defense departments.

It's not immediately clear when the hacking took place, but DHS notified all its employees internally on Aug. 6.

At that point, DHS issued "stop-work orders" preventing further information flows to USIS until the agency was confident the company could safeguard its records. At the same time, OPM temporarily halted all USIS background check fieldwork "out of an abundance of caution," spokeswoman Jackie Koszczuk said.

Officials would not say whether workers from other government agencies were at risk. DHS will provide workers affected by the intrusion with credit monitoring. The risk to as many as 25,000 DHS workers was first reported Friday by Reuters.

A cybersecurity expert, Rick Dakin, said the possibility that other federal departments could be affected depends on whether the DHS records were "segmented," or walled off, from other federal agencies' files inside USIS.

"The big question is what degree of segmentation was already in place so that other agencies weren't equally compromised," said Dakin, chief executive of Coalfire, a major IT audit and compliance firm.

Explore further: Senior US cybersecurity official resigns

Related Stories

US plans to scan workers with secret clearances

March 10, 2014

U.S. officials say they plan to set up a sweeping system of electronic monitoring that will tap into government, financial and other databases to scan the behavior of many of the 5 million federal employees with secret clearances.

Report: Chinese hackers hit US personnel networks (Update)

July 10, 2014

Chinese hackers broke into the computer networks of the Office of Personnel Management earlier this year with the intention of accessing the files of tens of thousands of federal employees who had applied for top-secret security ...

Chinese man accused of hacking into US computers

July 12, 2014

U.S. authorities have charged a Chinese businessman with hacking into the computer systems of U.S. companies with large defense contracts, including Boeing, to steal data on military projects, including some of its latest ...

US warns retailers on data-stealing malware

July 31, 2014

US government cybersecurity watchdogs warned retailers Thursday about malware being circulated that allows hackers to get into computer networks and steal customer data.

Security contractor says hit by computer breach

August 6, 2014

A government contractor that handles hundreds of thousands of security clearance background checks for civilian and military workers says that some workers' personal information was compromised after a recent computer breach.

Recommended for you

Schlieren images reveal supersonic shock waves

August 27, 2015

NASA researchers in California are using a modern version of a 150-year-old German photography technique to capture images of shock waves created by supersonic airplanes. Over the past five years scientists from NASA's Armstrong ...

Interactive tool lifts veil on the cost of nuclear energy

August 24, 2015

Despite the ever-changing landscape of energy economics, subject to the influence of new technologies and geopolitics, a new tool promises to root discussions about the cost of nuclear energy in hard evidence rather than ...

0 comments

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more

Click here to reset your password.
Sign in to get notified via email when new comments are made.