Pentagon sued over data breach affecting more than 3 million people - Federal News Network - 鲸鱼体育官网

Two Marines are suing the Defense Department over a breach of the Defense Manpower Data Center’s information system that exposed the personal information belonging to more than 3 million people with ties to the U.S. military.

The lawsuit, filed Tuesday in federal court in the District of Columbia, alleges that the department violated the Privacy Act of 1974 by failing to safeguard sensitive personal information and adequate cybersecurity controls despite internal warnings. [...] Explore how DoD, GSA, NASA and OFPP are modernizing workforce strategies, streamlining procurement and leveraging tech to deliver mission outcomes at speed and effectively in our new ebook, sponsored by Icertis.

The complaint cites inspector general reports dating back to 2021 that warned the department about problems with its cybersecurity practices but continued to “intentionally and willfully disregard its cybersecurity responsibilities.” [...] In July, the DMDC discovered a vulnerability in its file sharing system that allowed a “small number of unauthorized users” to access a massive swath of sensitive data, including full names, dates of birth, Social Security numbers, contact information, military jobs and other records, for nearly nine months. The department didn’t notify affected individuals of the breach until late September.