Federal Workers Notified After SRA Breach

[Paul Ferguson <fergdawgster () gmail com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Via NetworkWorld.

[snip]

Employees at federal security agencies are being notified that their
personal information may have been compromised after hackers planted a
virus on computer networks of government contractor SRA International.

SRA began notifying employees and all of its customers after discovering
the breach recently, company spokeswoman Sheila Blackwell said Tuesday. The
malicious software may have allowed hackers to get access to data
maintained by SRA, including "employee names, addresses, Social Security
numbers, dates of birth and healthcare provider information," the company
said in a notification [1] posted at the Maryland Attorney General's Web
site.

The breach is embarrassing for SRA, a 6,600-employee technology consulting
company that sells cybersecurity and privacy services to the federal
government. The company wouldn't say which federal agencies were affected
by the breach, but in U.S. Securities and Exchange Commission filings it
lists intelligence agencies and those such as the U.S. Department of
Defense, the U.S. Department of Homeland Security and the U.S. National
Guard among its clients.

[snip]

More:
http://www.networkworld.com/news/2009/020309-federal-workers-notified-after
- -sra.html

[1] http://www.oag.state.md.us/idtheft/Breach%20Notices/ITU-164577.pdf

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.3 (Build 3017)

wj8DBQFJiPcQq1pz9mNUZTMRArM/AKCcFreOo66QqIzwzue0LVb8O3Bb/ACg1qzo
dey1lLyMwlTx84MGXjvCZ6k=
=v6Sn
-----END PGP SIGNATURE-----

-- 
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawgster(at)gmail.com
 ferg's tech blog: http://fergdawg.blogspot.com/
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.