Someone repeatedly compromised NASA servers

[InfoSec News <alerts () infosecnews org>]

https://www.infosecnews.org/someone-repeatedly-compromised-nasa-servers/

By William Knowles @c4i
Senior Editor
InfoSec News
December 19, 2018

This isn't going to improve NASA’s FISMA scorecard rating for 2018.

On Tuesday, December 18, 2018. Bob Gibbs, Assistant Administrator, Office of 
the Chief Human Capital Officer sent an agency-wide message to the 17,000+ NASA 
employees, according to SpaceRef which posted the memo on their site.

On Oct. 23, 2018, NASA cybersecurity personnel began investigating a possible 
compromise of NASA servers where personally identifiable information (PII) was 
stored. After initial analysis, NASA determined that information from one of 
the servers containing Social Security numbers and other PII data of current 
and former NASA employees may have been compromised.

Upon discovery of the incidents, NASA cybersecurity personnel took immediate 
action to secure the servers and the data contained within. NASA and its 
Federal cybersecurity partners are continuing to examine the servers to 
determine the scope of the potential data exfiltration and identify potentially 
affected individuals. This process will take time. The ongoing investigation is 
a top agency priority, with senior leadership actively involved. NASA does not 
believe that any Agency missions were jeopardized by the cyber incidents.

[...]

--
Subscribe to InfoSec News
https://www.infosecnews.org/subscribe-to-infosec-news/
https://twitter.com/infosecnews_