According to sources, Immigration and Customs Enforcement (a Government organization in District of Columbia) was hit with a cyber attack. It was first reported on 2022-11-30.
Source 1 | 2022-11-30
“Immigration and Customs Enforcement has launched an investigation after a spreadsheet containing personally identifiable information of 6,252 immigrants seeking protection in the U.S. was inadvertently uploaded to a public-facing website on Monday. “
“The internal probe is being led by the agency’s Office of Professional Responsibility and Office of the Chief Information Officer, FedScoop has learned. As part of the investigation, ICE will analyze IP addresses to establish which entities may have accessed the PII while it was publicly available, and issue “claw-back” letters instructing individuals and organizations to destroy any files they may have retained.“
“The remedial action comes after details including names, nationalities and locations were accidentally uploaded to the agency’s website. The data disclosure may have directly placed immigrants at risk of retaliation from the individuals, gangs and governments they are fleeing, according to the Los Angeles Times, which first reported details of the incident. All of the immigrants affected by the data disclosure are currently in ICE custody.“
“In a statement to FedScoop, ICE said: “On November 28, 2022, while performing routine updates, a document was erroneously posted to ICE.gov for approximately five hours that included names and other personally identifiable information, along with immigration information, of approximately 6,000 noncitizens in ICE custody.” They added: “Upon notification, U.S. Immigration and Customs Enforcement took swift action to immediately rectify the error. Though unintentional, this release of information is a breach of policy and the agency is investigating the incident and taking all corrective actions necessary. ICE is notifying noncitizens impacted by the disclosure.“
Cybersecurity for Critical Infrastructure
SecuLore provides Managed Detection and Response (MDR) to protect our nation’s critical infrastructure from cyber threats. Our expertise is built on deep knowledge of 9-1-1 technology, cyberwarfare, and ethical hacking, ensuring the highest level of cybersecurity for public safety agencies.