{"id":1558,"date":"2015-06-05T08:11:21","date_gmt":"2015-06-05T12:11:21","guid":{"rendered":"http:\/\/blog.cedsolutions.com\/?p=1558"},"modified":"2015-06-05T08:11:21","modified_gmt":"2015-06-05T12:11:21","slug":"chinese-breach-data-of-4-million-federal-workers","status":"publish","type":"post","link":"https:\/\/blog.cedsolutions.com\/1558\/chinese-breach-data-of-4-million-federal-workers\/","title":{"rendered":"Chinese breach data of 4 million federal workers"},"content":{"rendered":"

\"Cyber<\/a>Hackers working for the Chinese state breached the computer system of the Office of Personnel Management in December, U.S. officials said Thursday, and the agency will notify about 4\u2009million current and former federal employees that their personal data may have been compromised.<\/p>\n

\n
\n
\n
\n
\n
The hack was the largest breach of federal employee data in recent years. It was the second major intrusion of the same agency <\/a>by China in less than a year and the second significant foreign breach into U.S. government networks in recent months.\u00a0Last year, Russia compromised<\/a> White House and State Department e-mail systems in a campaign of cyber\u00adespionage.The OPM, using new tools, discovered the breach in April, according to officials at the agency who declined to discuss who was behind the hack.Other U.S. officials, who spoke on the condition of anonymity, citing the ongoing investigation, identified the hackers as being state-sponsored.<\/article>\n
\n
\n
\n
\n
\n
\n
<\/article>\n
One private security firm, iSight Partners, says it has linked the OPM intrusion to the same cyber\u00adespionage group that hacked the health insurance giant Anthem. The FBI suspects that that intrusion, discovered in February, was also the work of Chinese hackers, people close to the investigation have said.<\/p>\n
\u00a0The intruders in the OPM case gained access to information that included employees\u2019 Social Security numbers, job assignments, performance ratings and training information, agency officials said. OPM officials declined to comment on whether payroll data was exposed other than to say that no direct-deposit information was compromised. They could not say for certain what data was taken, only what the hackers gained access to.<\/div>\n

\u201cCertainly, OPM is a high-value target,\u201d Donna Seymour, the agency\u2019s chief information officer, said in an interview. \u201cWe have a lot of information about people, and that is something that our adversaries want.\u201d<\/p>\n

The personal information exposed could be useful in crafting \u201cspear-phishing\u201d e-mails, which are designed to fool recipients into opening a link or an attachment so that the hacker can gain access to computer systems. Using the stolen OPM data, for instance, a hacker might send a fake e-mail purporting to be from a colleague at work.<\/p>\n

After the earlier breach discovered in March 2014, the OPM undertook \u201can aggressive effort to update our cybersecurity posture, adding numerous tools and capabilities to our networks,\u201d Seymour said. \u201cAs a result of adding these tools, we were able to detect this intrusion into our networks.\u201d<\/p>\n

\n
\n
\n
\n
\n
\u201cProtecting our federal employee data from malicious cyber incidents is of the highest priority at OPM,\u201d Director Katherine Archuleta said in a statement.In the current incident, the hackers targeted an OPM data center housed at the Interior Department. The database did not contain information on background investigations or employees applying for security clear\u00adances, officials said.<\/p>\n
\n
\n
\n
\n
\n
\n

By contrast, in March 2014, OPM officials discovered that hackers had breached an OPM system that manages sensitive data on federal employees applying for clearances. That often includes financial data, information about family and other sensitive details. That breach, too, was attributed to China, other officials said. OPM officials declined to comment on whether the data affected in this incident was encrypted or had sensitive details masked. They said it appeared that the intruders are no longer in the system.<\/p>\n

\u201cThere is no current activity,\u201d an official said. But Chinese hackers frequently try repeat intrusions.<\/p>\n

\n
\n
\n
\n
\n
Seymour said the agency is working to better protect the data stored in its servers throughout the government, including by using data masking or redaction. \u201cWe\u2019ve purchased tools to be able to implement that capability for all\u201d the data, she said.<\/p>\n

Among the steps taken to protect the network, the OPM restricted remote access to the network by system administrators, officials said. When the OPM discovered the breach, it notified the FBI and the Department of Homeland Security.<\/p>\n

A senior DHS official, who spoke on the condition of anonymity because of the ongoing investigation, said the \u201cgood news\u201d is that the OPM discovered the breach using the new tools. \u201cThese things are going to keep happening, and we\u2019re going to see more and more because our detection techniques are improving,\u201d the official said.<\/p>\n

FBI spokesman Josh Campbell said his agency is working with DHS and OPM officials to investigate the incident. \u201cWe take all potential threats to public- and private-sector systems seriously and will continue to investigate and hold accountable those who pose a threat in cyberspace,\u201d he said.<\/p>\n

\n
\n
\n
\n
\n
The intruders used a \u201czero-day\u201d \u2014 a previously unknown cyber-tool \u2014 to take advantage of a vulnerability that allowed the intruders to gain access into the system.China is one of the most aggressive nations<\/a> targeting U.S. and other Western states\u2019 networks. In May 2014, the United States announced the indictments of five Chinese military officials for economic cyber\u00adespionage<\/a> \u2014 hacking into the computers of major steel and other companies and stealing plans, sensitive negotiating details and other information.<\/p>\n

\u201cChina is everywhere,\u201d said Austin Berglas, head of cyber investigations at K2 Intelligence and a former top cyber official at the FBI\u2019s New York field office. \u201cThey\u2019re looking to gain social and economic and political advantage over the United States in any way they can. The easiest way to do that is through theft of intellectual property and theft of sensitive information.\u201d<\/p>\n

Rep. Adam B. Schiff (Calif.), ranking Democrat on the House Intelligence Committee, said the past few months have seen a massive series of data breaches affecting millions of Americans.<\/p>\n

\u201cThis latest intrusion .\u2009.\u2009. is among the most shocking because Americans may\u00a0expect that federal computer networks are maintained with state-of-the-art defenses,\u201d he said. \u201cThe cyberthreat from hackers, criminals, terrorists and state actors is one of the greatest challenges we face on a daily basis, and it\u2019s clear that a substantial improvement in our cyber databases and defenses is perilously overdue.\u201d<\/p>\n

\n
\n
\n
\n
\n
\n

Colleen M. Kelley, president of the nation\u2019s \u00adsecond-largest federal worker union, the National Treasury Employees Union, said her organization \u201cis very concerned\u201d about the breach. \u201cData security, particularly in an era of rising incidence of identity theft, is a critically important matter,\u201d she said.<\/p>\n

\u201cIt is vital to know as soon as possible the extent to which, if any, personal information may have been obtained so that affected employees can be notified promptly and encouraged to take all possible steps to protect themselves from financial or other risks,\u201d she said.<\/p>\n

http:\/\/www.washingtonpost.com\/world\/national-security\/chinese-hackers-breach-federal-governments-personnel-office\/2015\/06\/04\/889c0e52-0af7-11e5-95fd-d580f1c5d44e_story.html<\/p>\n

Protect your systems and networks with the knowledge gained from the new Cisco Course: Cyber Security Specialist<\/a> (7\/6 to 7\/11, 8\/10 to 8\/14, 9\/14 to 9\/18); ISC2 Official CISSP<\/a> course (7\/20 to 7\/25, 8\/24 to 8\/29) and attend our Security Certified Ethical Hacking<\/a> course (6\/15 to 6\/19, 7\/27 to 7\/31, 8\/31 to 9\/4), our (\u00a0Computer Hacking Forensics Investigator<\/a> course (6\/22 to 6\/26, 8\/3 to 8\/7, 10\/26 to 10\/30) and Security ESCA\/LPT<\/a> course (11\/2 to 11\/6) !<\/div>\n
<\/div>\n
(800) 611-1840,\u00a0www.cedsolutions.com, info@cedsolutions.com<\/div>\n

 <\/p>\n<\/article>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/article>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

 <\/p>\n<\/article>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

 <\/p>\n<\/article>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

 <\/p>\n<\/article>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

 <\/p>\n<\/article>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

 <\/p>\n<\/article>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

Hackers working for the Chinese state breached the computer system of the Office of Personnel Management in December, U.S. officials said Thursday, and the agency will notify about 4\u2009million current and former federal employees that their personal data may have been compromised. The hack was the largest breach of federal employee data in recent years. […]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wds_primary_category":0},"categories":[4,5,7,8],"tags":[],"_links":{"self":[{"href":"https:\/\/blog.cedsolutions.com\/wp-json\/wp\/v2\/posts\/1558"}],"collection":[{"href":"https:\/\/blog.cedsolutions.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.cedsolutions.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.cedsolutions.com\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.cedsolutions.com\/wp-json\/wp\/v2\/comments?post=1558"}],"version-history":[{"count":0,"href":"https:\/\/blog.cedsolutions.com\/wp-json\/wp\/v2\/posts\/1558\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.cedsolutions.com\/wp-json\/wp\/v2\/media?parent=1558"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.cedsolutions.com\/wp-json\/wp\/v2\/categories?post=1558"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.cedsolutions.com\/wp-json\/wp\/v2\/tags?post=1558"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}