Cyber Risks · Krebs on Security

DHS Alerts Contractors to Bank Data Theft

Summary: A breach at a DHS web portal exposed private documents and financial information belonging to at least 114 organizations that bid on a 2013 contract for the Science & Technology division's first-responder communications work. DHS privacy officer Christopher Lee said the incident appeared to have occurred over the prior four months, and DHS reported that 520 documents were improperly accessed, with only 16 of the roughly 114 organizations having bank information in the potentially accessed files.

What you should know: The portal was run by contractor REI Systems, which declined to comment, leaving unclear whether the unauthorized access extended to its other government projects for HHS, DOJ, GSA, IRS, NASA and the FAA. Bank account details for 16 bidders sat exposed for up to four months before notification, on a system the department had not yet traced to a cause or source.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related