Senators call for lifetime protections after OPM data breach. I think this is appropriate ... how about you?

2015-07-11T13:27:47-04:00

The Office of Personnel Management is increasing the offering of credit monitoring to employees affected in the second breach from a single year to at least three years, though legislators are saying this is still not enough.

Four Democratic senators have come together to put forward legislation that would provide lifetime credit monitoring and at least $5 million in identity theft insurance, compared to the $1 million currently being offered.

The Reducing the Effects of the Cyberattack on OPM Victims Emergency Response (RECOVER) Act was introduced on Thursday by Sens. Ben Cardin, D-Md., Barbara Mikulski, D-Md., Mark Warner, D-Va., and Tim Kaine, D-Va.

The senators said they were outraged by the OPM breach, as well as the agency's response, which they deem inadequate.

"Private-sector cyber hacks and cyberattacks have become too commonplace, but when the federal government's own computer system shows its vulnerabilities to the world, we have a responsibility to protect the people who have been put at risk," Cardin said. "We need to plug the holes in the federal network and make sure our workers, their families and all those who have been violated are held harmless from any damage that may be done."

The staggering scope of the second breach – which affected almost 20 million current, former and potential federal employees and another 2 million family members and friends – along with the kinds of personal information stolen moved the lawmakers to ensure everyone affected is fully protected.

"[Thursday's] news that 21.5 million additional Americans were affected by one of the OPM breaches is a stark reminder of how far-reaching the impact is here," Kaine said. "The least we can do for the millions of past, current and prospective federal employees whose personal information has been exposed is provide them with the strongest protections available."

http://www.federaltimes.com/story/government/omr/opm-cyber-report/2015/07/10/lifetime-credit-monitoring-opm-breach/29958383/

Senators call for lifetime protections after OPM breach

Proposed legislation would provide lifetime credit monitoring and at least $5 million in liability protection.

Response by SPC Private RallyPoint Member made Jul 11 at 2015 2:09 PM

2015-07-11T14:09:32-04:00

How about protection for all workers. Including veterans.
Whether people believe it or not. We are still in the system too!

Response by MSgt Manuel Diaz made Jul 11 at 2015 4:59 PM

2015-07-11T16:59:23-04:00

I believe these senators need to learn to protect themselves. They are so adamant about gun control. I say no to lifetime protection for those self-serving bastereds.

Response by PO1 John Miller made Jul 11 at 2015 8:56 PM

2015-07-11T20:56:17-04:00

Honestly I think it might be a bit overkill. Throughout all of the government data breaches I have never had my information stolen (I don't know about this most recent one as I haven't received any notifications yet).
I did have my bank account compromised after Home Depot got hacked. I didn't sign up for their free credit monitoring but my bank is monitoring my credit. They also reimbursed all money that was taken from my account.
What I don't like about this is the use of the term "federal employee." Language can sometimes be very specific and I wonder if they actually mean only "current and former federal employees." The reason I bring this up is military personnel are not considered "federal employees" for the most part, unless they got a civil service job. I'm curious if they mean that this protection will be extended to all military personnel, active and veteran, family members and other contacts whose information was stolen, and people who applied for clearances but for whatever reason never got hired by the federal government.

Response by SCPO Private RallyPoint Member made Jul 12 at 2015 11:03 AM

2015-07-12T11:03:04-04:00

I certainly do. I received my letter confirming that I was one of the 21+ million.

Response by MSgt Private RallyPoint Member made Jul 12 at 2015 11:28 AM

2015-07-12T11:28:38-04:00

My information was compromised in this breach. I did sign up for the free monitoring. My concern is, this could affect me long term. My information is in the hands of unknown people and they could use it or attempt to use it well after the free service expires.

Response by LTJG Private RallyPoint Member made Jul 13 at 2015 12:26 AM

2015-07-13T00:26:48-04:00

I think credit monitoring is the least of the concerns resulting from this breach. I just completed an e-Qip to renew my clearance so my SF-86 isn't likely part of the data that was compromised, but it is pretty outrageous to think of the nature and breadth of the information we are compelled to disclose only to have it stolen. Taking it a step further, are guys in sensitive positions going to be subjected to further scrutiny because they are now potential blackmail targets? This whole thing stinks.

Response by CPT Alan W. made Jul 13 at 2015 1:17 AM

2015-07-13T01:17:10-04:00

It's a good start and really just band aid for everyone they were supposed to be protecting. I hope they figure out a way to store the details from each investigation in a safe place that is not connected to any network once the investigation has been completed, and only access it and put it back on a network when it is needed (such as a periodic investigation). They should only have the minimum information on the network that is needed for day to day activities. I don't know if that is possible but it certainly would have helped to contain this breach.

Response by GySgt Wayne A. Ekblad made Jul 30 at 2015 11:13 AM

2015-07-30T11:13:26-04:00

What federal employees really need to worry about after the Chinese hack ...

A new government review of what the Chinese hack of sensitive security clearance files of 21 million people means for national security is in — and some of the implications are quite grave.

Covert intelligence officers and their operations could be exposed and high-resolution fingerprints could be copied by criminals, the Congressional Research Service disclosed in an analysis of one of the most harmful cyber thefts in U.S. history.

Read more at ...

http://www.washingtonpost.com/blogs/federal-eye/wp/2015/07/29/stolen-fingerprints-blown-spy-covers-the-risks-to-national-security-from-the-chinese-employee-hack/

What federal employees really need to worry about after the Chinese hack

Fingerprints the government collects for background investigations could be used by criminals to unmask a spy, a new analysis found

Response by GySgt Wayne A. Ekblad made Jul 30 at 2015 2:24 PM

2015-07-30T14:24:18-04:00

Credit monitoring contract for second OPM breach coming soon ...

Federal employees — and their affected relatives — should know by mid-August the terms of the credit monitoring and liability protections the Office of Personnel Management will be offering to those who had their information stolen in the second OPM data breach.

Read more at ...

http://www.federaltimes.com/story/government/cybersecurity/2015/07/30/credit-monitoring-contract/30883733/

Credit monitoring contract for second OPM breach coming soon

After the original solicitation was pulled this week, GSA says new BPA and awards are on the way.

Response by Sgt Ken Prescott made Aug 8 at 2015 10:10 PM

2015-08-08T22:10:23-04:00

I'm pretty sure my information was compromised in at least one (if not both) hacks.

Yeah, I'm f***ed.

Response by Sgt Ken Prescott made Aug 8 at 2015 10:12 PM

2015-08-08T22:12:52-04:00

BTW, consider the fact that the Ashley Madison site was hacked.

I suggest that it's tied to the OPM hack.

1. OK, who's been engaged in canoodling with someone other than their official significant other?
2. Any of 'em work for Uncle?
3. Any of 'em have a TS clearance?
4. HAVE ANY OF THEM CONCEALED THIS ON THEIR LIFESTYLE POLYGRAPH AND PASSED?

That last question is the biggie: it tells you who can be recruited into spying...and still pass a poly.

Response by TSgt Private RallyPoint Member made Aug 9 at 2015 3:58 AM

2015-08-09T03:58:24-04:00

I agree with previous comments that this serves a band-aid to a larger wound. I haven't receive any notification yet, but with two SF-86s on record it will be a matter of time. It wasn't just my stuff that was stolen, it was my family and friends information too. They have their SSN, Birthday, etc to steal their identify and have their addresses which means the responsible party could target them for whatever means (unlikely, but plausible). On a selfish (trying to be funny) note: I am glad that I got my new clearance re-up paperwork done prior to hack. I doubt any of my family and friends would willingly give me their PII that is needed to fill out my SF-86.

Response by CPT Private RallyPoint Member made Aug 19 at 2015 8:52 PM

2015-08-19T20:52:13-04:00

thats a great idea