U.S. Agency for Global Media data breach caused by a phishing attack

guest · May 4, 2021

U.S. Agency for Global Media data breach caused by a phishing attack
May 4, 2021
https://www.bleepingcomputer.com/ne...edia-data-breach-caused-by-a-phishing-attack/

The U.S. Agency for Global Media (USAGM) has disclosed a data breach that exposed the personal information of current and former employees and their beneficiaries.

In a data breach notification shared with BleepingComputer by former Voice of America White House correspondent Dan Robinson, USAGM discloses that they suffered a data breach after falling for a phishing attack in December 2020.

This phishing attack allowed a threat actor to access an agency email account containing the personal information of current and former USAGM, Voice of America, and Office of Cuba Broadcasting employees who worked at the agency between 2013 and 2020.
Click to expand...

USAGM states that they secured the affected account once they learned of the breach and began providing phishing education to staff members. They also sped up their rollout of multifactor authentication (MFA) for the agency's Office 365, SharePoint, and OneDrive accounts.
Click to expand...

U.S. Agency for Global Media Notified Employees of Personal Information Security Breach Four Months After It Occurred

Soon after Michael Pack became the first Senate-confirmed CEO of the U.S. Agency for Global Media (USAGM) in June 2020, the agency’s new senior management learned that previous senior management had repeatedly failed to adhere to national security protocols and essential federal government personnel security practices for at least a decade.
[...]
U.S. national security is jeopardized every time there is a single security violation. In this case, an entire agency – one that reaches more than 350 million people around the world on a weekly basis – allowed for lax and even non-existent security protocols for an entire decade. USAGM’s longstanding failure to effectively vet its personnel, ranging from interns to contractors to grantees to full-time federal employees, made it vulnerable to those with nefarious intent toward the United States.
Click to expand...

Log in or Sign up

U.S. Agency for Global Media data breach caused by a phishing attack

guest Guest

Log in or Sign up

U.S. Agency for Global Media data breach caused by a phishing attack

guest Guest

Useful Searches