Government security workers warned of identity theft risk

Graham Cluley

No company likes to admit that it has had a security breach. But things must feel even more awkward when the victim company is a computer security contractor working for the US federal government.

SRA International, a government contractor that provides cybersecurity services, has admitted that computer malware found on its computer network may have stolen personal information about its employees.

The unnamed malware was found on a network server also used for storing employees’ names, addresses, dates of birth, health information and social security numbers. The firm has informed its staff by letter of the security breach, and advised that they are offering credit monitoring services to employees concerned that they may become victims of identity theft.

I guess the big unanswered question is this: Why wasn’t this sensitive data…

Read more in my article on the Naked Security website.

Found this article interesting? Follow Graham Cluley on Twitter or Mastodon to read more of the exclusive content we post.

Graham Cluley is a veteran of the anti-virus industry having worked for a number of security companies since the early 1990s when he wrote the first ever version of Dr Solomon's Anti-Virus Toolkit for Windows. Now an independent security analyst, he regularly makes media appearances and is an international public speaker on the topic of computer security, hackers, and online privacy. Follow him on Twitter at @gcluley, on Mastodon at @[email protected], or drop him an email.