Government · US · 3 min read
US military records: 3 million files, nine months unnoticed
9 months
before anyone noticed
Personnel records for 2.76 million living and 294,000 deceased service members sat exposed to attackers for nine months.
How they got in
Undisclosed; the intrusion went undetected for nine months.
The damage
About 3 million personnel records.
Board takeaway
The longer nobody notices, the worse it gets. Someone must own reviewing alerts every day.
What to do this week
- Name one person responsible for reviewing security alerts daily.
- Test how fast your team would notice a strange login.
- Keep logs long enough to investigate.
Next breakdown
Supermarket freezers hacked: tens of millions of euros of food thrown away →