Forest Global Training Partners

Cyber Risks · Krebs on Security

DOGE to Fired CISA Staff: Email Us Your Personal Data

Summary: A message posted Monday on CISA's homepage instructed recently fired CISA employees to email a password-protected attachment containing their full name, employment dates, and either date of birth or Social Security number, with the password presumably sent in plaintext in the same email. The notice was removed Tuesday evening and replaced with a shorter message directing former employees to a specific email address, but a similar version remains on the U.S. Citizenship and Immigration Services website.

Key Takeaway: The administration asked unlawfully fired federal employees to send Social Security numbers and birth dates through email it describes as readable as a postcard, and password-protected attachments are exactly what many antivirus and security scanners cannot inspect - so the same channel invites malware in.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related