http://www.nationalinterest.org/feature/data-theft-national-security-threat-14843?page=show
The OPM has failed to respond adequately to the theft of information on 22 million Americans.
David R. Shedd, January 8, 2016
In mid-2015 someone—all indicators point to the Chinese government—stole the security clearance dossiers of more than 22 million Americans. It was the most catastrophic cyber data breach in U.S. history, with the potential to inflict incalculable damage to our national security. Yet the response from the Office of Personnel Management (OPM)—the agency that failed to protect the files in the first place—has been curiously and dangerously lackadaisical.
The laid-back tone was set early on. The administration released news of the theft in dribs and drabs. To date, the full story of what was compromised remains veiled.
What we do know is this: our adversaries now possess a massive amount of highly sensitive information—personal and professional—about past and current U.S. government personnel. Many of those workers have been entrusted to guard America’s most sensitive secrets.
Our enemies are always looking for leverage to advance their nefarious goals. Now they possess tens of millions of files packed with highly leverage-able information.
The OPM breach is stunning in many ways. For one thing, it was absolutely predictable. For years, the Inspector General had reported security shortfalls in OPM’s information technology infrastructure. Yet OPM ignored these problems. For example, it failed to patch its vulnerable software, failed to install antivirus software and failed to implement the required authentication certification. OPM has yet to address all the IG recommendations for a more secure IT system.
While OPM paid scant attention to the Inspector General’s reports, the Chinese appear to have read them closely and moved to exploit the uncorrected vulnerabilities.
The OPM has failed to respond adequately to the theft of information on 22 million Americans.
David R. Shedd, January 8, 2016
In mid-2015 someone—all indicators point to the Chinese government—stole the security clearance dossiers of more than 22 million Americans. It was the most catastrophic cyber data breach in U.S. history, with the potential to inflict incalculable damage to our national security. Yet the response from the Office of Personnel Management (OPM)—the agency that failed to protect the files in the first place—has been curiously and dangerously lackadaisical.
The laid-back tone was set early on. The administration released news of the theft in dribs and drabs. To date, the full story of what was compromised remains veiled.
What we do know is this: our adversaries now possess a massive amount of highly sensitive information—personal and professional—about past and current U.S. government personnel. Many of those workers have been entrusted to guard America’s most sensitive secrets.
Our enemies are always looking for leverage to advance their nefarious goals. Now they possess tens of millions of files packed with highly leverage-able information.
The OPM breach is stunning in many ways. For one thing, it was absolutely predictable. For years, the Inspector General had reported security shortfalls in OPM’s information technology infrastructure. Yet OPM ignored these problems. For example, it failed to patch its vulnerable software, failed to install antivirus software and failed to implement the required authentication certification. OPM has yet to address all the IG recommendations for a more secure IT system.
While OPM paid scant attention to the Inspector General’s reports, the Chinese appear to have read them closely and moved to exploit the uncorrected vulnerabilities.