Last year the U.S. government faced what is believed to be the largest cyberattack, as the Office of Personnel Management (OPM) discovered an intrusion into personal information of more than 4 million current and former federal employees, according to a recent OPM press release.
Social security numbers, health care information and other sensitive information were hacked. However in a second separate data breach that was made public in June, personal information of as many as 21.5 million employees and U.S.[1] citizens was compromised, according to the press release. The hackers accessed government forms used for security clearances such as SF86 questionnaires, which contain personal information regarding employees’ and their family members’ information.
The hackers obtained a log-in credential adopted by the contractor OPM uses to conduct background checks of federal employee applications. Hackers today have become more sophisticated and creative at obtaining confidential information through methods such as phishing.
After conducting an internal review that showed a vulnerability in its background check system, E-QIP, OPM has taken proactive security measures by temporarily shutting down federal employee background checks, according to an OPM press release that was released late-June.[2]
What Does This Mean For You?
This is not the first time the government has withstood a large-scale attack, and it definitely will not be the last. According to a Government Accountability Office (GAO) report, 19 of 24 federal agencies have declared cybersecurity as a “significant deficiency or material weakness.”[3]Your organization, whether federal, financial or of another industry, is at risk.
Shortly after the public announcement of the breach, OPM released a press release with recommendations on how to avoid identity theft.[4] OPM advises that users be aware of phones calls and emails from people asking about other employees’ personal information, to not reveal personal information in emails, and to be proactive in utilizing anti-phishing software.
Wilson Consulting Group (WCG) can equip your organization with the tools and techniques to prevent malicious cyber and security attacks, recognize any potential risks, and provide your employees the knowledge on how to strengthen your organization’s security infrastructure. WCG offers a Cybersecurity Assessment to assist organizations, including, but not limited to, federal agencies, financial institutions and healthcare organizations with protecting their most vital information and assets from internal and external malicious forces. You will be provided with a comprehensive analysis of the information gathered and an assessment of the weaknesses detected, which, when patched, will strengthen your security infrastructure. We also provide you recommendations for remediation based on the level of risk for each weakness detected. Overall, you will experience a reduced risk of information being compromised, and a safer and more viable environment. We provide other services, such as Penetration Testing and Vulnerability Assessments, to cater to your organization’s needs and issues.
[1]https://www.opm.gov/news/releases/2015/07/opm-announces-steps-to-protect-federal-workers-and-others-from-cyber-threats/
[2]https://www.opm.gov/news/releases/2015/06/opm-notifies-agencies-of-temporary-suspension-of-e-qip-system/
[3]http://www.gao.gov/assets/680/671253.pdf
[4]https://www.opm.gov/news/releases/2015/06/opm-to-notify-employees-of-cybersecurity-incident/
Many cyberattacks succeed due to mistakes by employees and a lack of awareness of basic aspects of cybersecurity. According to the 2022 Verizon Data Breach Investigations Report, 82% of data breaches in 2021 involved the human element.
On May 7, 2021, Colonial Pipeline, Co. was forced to close operations after a ransomware hack was confirmed to have breached their systems. This attack hindered services to the East-coast of the United States and sparked fears of a massive gas shortage to American motorists. This hack greatly compromised Colonial Pipeline’s system integrity and put private data at risk.
5G is a wireless technology with higher speeds and increased bandwidth, which means that you can download/stream videos online at a faster rate without worrying much about the number of users on the network. 5G networks also help reduce the time needed for data to travel across the network. This process is called latency, which is a major factor in automated processes, such as self-driving cars and factory robots. Due to the massive connectivity of devices collectively known as the Internet of Things (IoT) across 5G networks, viable and in-depth security measures should be in place to prevent cybercriminals from hijacking the connected devices or launching Distributed Denial of Service (DDoS) attacks.
Stay In The Know With Our Newsletter
