Hackers Accessed 632,000 Email Addresses at US Justice, Defense Departments

A Russian-speaking hacking group obtained access to the email addresses of about 632,000 US federal employees at the departments of Defense and Justice as part of the sprawling MOVEit hack last summer, according to a report on the wide-ranging attack obtained through a Freedom of Information Act request. From a report: The report, by the US Office of Personnel Management, provides new details about a cyberattack in which hackers exploited flaws in MOVEit, a popular file-transfer tool. Federal cybersecurity officers previously confirmed that government agencies were compromised by the attack but have provided little information on the scope of the attack, nor did they name the agencies affected.

The Office of Personnel Management, in a July report on the incident submitted to a congressional committee, said an unauthorized actor obtained access to government email addresses, links to government employee surveys administered by OPM and internal OPM tracking codes. The impacted employees were at the Department of Justice and various parts of the Defense Department: the Air Force, Army, US Army Corps of Engineers, the Office of the Secretary of Defense, the Joint Staff and Defense Agencies and Field Activities.

Ha

[Anonymous Coward]

My fingerprints and other sensitive information were part of the OPM hack way back when. E-mail address? big deal!

MOVEIt

[Midnight_Falcon]

Don't want to hire sysadmins with basic scripting skills like SFTP and compression? Instead, hire low skill IT workers and buy MOVEIt. Already did that in 2001? Keep using it because modern solutions like SAN snapshots etc would also require some skill! Seriously, MOVEIt is some crapware Windows-only IT admins who wore blackberries on their belt used to implement. Of course legacy crapware has vulnerabilities.

MOVEit

[oldgraybeard]

again! Duh

Re:

[hambone142]

I got a kick out of seeing that a lot of politicians were still using AOL for their email.
The Fed is full of incompetent lackys.

Fuck these paywall sites

[TeddyRick]

Whether it's money or my email address I'm not offering either to any of these websites. Please stop greenlighting articles from them. Find an alternate source.