Belfast Telegraph

UK Website Of The Year

OPM hack: 21 million people's sensitive details stolen in biggest cyberattack in US history

Scope of the data breach vastly increases: criminal, financial, health, employment and residency histories stolen

Published 10/07/2015

Massive data breach: 'Hackers now in possession of all personnel data for every federal employee, every federal retiree, and up to 1 million former federal employees'
Massive data breach: 'Hackers now in possession of all personnel data for every federal employee, every federal retiree, and up to 1 million former federal employees'

Hackers stole the most sensitive information of 21 million people in the US, it has been revealed, and nobody will say who did it.

An already huge breach of the US government’s computer systems was much bigger than previously thought, the Obama administration has revealed.

The scope of the data breach, believed to be the biggest in US history, has grown dramatically since the government first said earlier this year that hackers had gotten into the Office of Personnel Management's (OPM) personnel database and stolen records for about 4.2 million people.

Since then, the administration has acknowledged a second, related breach of the systems housing private data that individuals submit during background investigations to obtain security clearances.

Read more

OPM hack: US blames China for huge cyberattack, as new era of cyberwarfare and internet terrorism arrives  

OPM hackers stole info on every US federal employee including social security numbers, says union

Adobe Flash security vulnerability revealed after Hacking Team documents leaked  

That second attack affected more than 19 million people who applied for clearances, as well as nearly two million of their spouses, housemates and others who never applied for security clearances, the administration said.

Among the data the hackers stole was criminal, financial, health, employment and residency histories, as well as information about their families and acquaintances.

The new revelations drew indignation from members of Congress who have said the administration has not done enough to protect personal data in their systems, as well as calls for OPM director Katherine Archuleta and her top deputies to resign.

Yet Ms Archuleta insisted she would not step down.

In a conference call with reporters, Ms Archuleta said the hackers also got hold of the user names and passwords that prospective employees used to fill out their background investigation forms, as well as the contents of interviews conducted as part of those inquiries.

Yet the government insisted there were no indications that the hackers have used the data they stole.

Numerous US lawmakers have said China was behind the attack. But Michael Daniel, President Barack Obama's cybersecurity co-ordinator, said the government was not yet ready to say who was responsible.

Officials have acknowledged that the same party was responsible for both of the breaches, which took place in 2014 and early 2015. Investigators previously said that the US government was increasingly confident that China's government, and not criminal hackers, was responsible for the extraordinary theft of personal information.

China has publicly denied involvement in the theft.

Yesterday, during a round-table discussion with reporters, FBI director James Comey described the scope of the OPM breach as "huge".

"It's a treasure trove of information about everybody who has worked for, tried to work for, or works for the United States government," he said.

The administration says it has stepped up its cybersecurity efforts by proposing new legislation, urging private industry to share more information about attacks and examining how the government conducts sensitive background investigations.

Independent

Independent News Service

Your Comments

COMMENT RULES: Comments that are judged to be defamatory, abusive or in bad taste are not acceptable and contributors who consistently fall below certain criteria will be permanently blacklisted. The moderator will not enter into debate with individual contributors and the moderator’s decision is final. It is Belfast Telegraph policy to close comments on court cases, tribunals and active legal investigations. We may also close comments on articles which are being targeted for abuse. Problems with commenting? customercare@belfasttelegraph.co.uk

Read More