https://www.infosecnews.org/someone-repeatedly-compromised-nasa-servers/
By William Knowles @c4i
Senior Editor
InfoSec News
December 19, 2018
This isn't going to improve NASA’s FISMA scorecard rating for 2018.
On Tuesday, December 18, 2018. Bob Gibbs, Assistant Administrator, Office of
the Chief Human Capital Officer sent an agency-wide message to the 17,000+ NASA
employees, according to SpaceRef which posted the memo on their site.
On Oct. 23, 2018, NASA cybersecurity personnel began investigating a possible
compromise of NASA servers where personally identifiable information (PII) was
stored. After initial analysis, NASA determined that information from one of
the servers containing Social Security numbers and other PII data of current
and former NASA employees may have been compromised.
Upon discovery of the incidents, NASA cybersecurity personnel took immediate
action to secure the servers and the data contained within. NASA and its
Federal cybersecurity partners are continuing to examine the servers to
determine the scope of the potential data exfiltration and identify potentially
affected individuals. This process will take time. The ongoing investigation is
a top agency priority, with senior leadership actively involved. NASA does not
believe that any Agency missions were jeopardized by the cyber incidents.
[...]
--
Subscribe to InfoSec News
https://www.infosecnews.org/subscribe-to-infosec-news/
https://twitter.com/infosecnews_