According to sources, DC Health Link (a Medical organization in District of Columbia) was hit with a cyber attack. It was first reported on 2023-03-08.
Source 1 | 2023-03-08
“DC Health Link — the health insurance marketplace for Washington, D.C., that is used by many White House staffers and their families — reported a data breach on Wednesday, with the FBI reporting that some of the information in the leak had been made available for purchase on the dark web. “
“In an internal memo sent to U.S. House staffers, House Chief Administrative Officer Catherine L. Szpindor informed recipients of the "significant data breach," which potentially exposed the personal identifiable information (PII) of thousands of employees, and warned them that their data may have been compromised. “
“While the internal memo states that the size and scope of the breach is unknown, the FBI confirmed that account information and PII belonging to House members and staff was stolen, but it does not appear that they were specifically targeted in the cyberattack. The FBI also said that while they believe the individuals selling the stolen information did not seem to be aware of its "high-level sensitivity" at the time, continued publicizing of the event would "certainly change" that. “
Source 2 | 2023-03-09
“A sweeping cybersecurity breach of congressional members’ private information was more extensive than previously known and affects not only House lawmakers and their staff but also Senate employees.“
“The compromised data is “extensive,” and includes sensitive data such as Social Security numbers, home addresses and information on Senate employees’ health insurance plans, the sergeant-at-arms said in the email, which urged Senate staff to freeze their family credit to guard against fraud. “
Guarding Against Data Breaches
Cybersecurity for Critical Infrastructure
SecuLore provides Managed Detection and Response (MDR) to protect our nation’s critical infrastructure from cyber threats. Our expertise is built on deep knowledge of 9-1-1 technology, cyberwarfare, and ethical hacking, ensuring the highest level of cybersecurity for public safety agencies.