Briefing
|
- Cybersecurity Incident – In internal memo to employees, NASA indicated one of its servers may have been hacked as first discovered on October 23, 20118, affecting employee data
- Affected Information – Hackers gained access to personally identifiable information (PII), including social security numbers, of employees that had been onboarded, separated or transferred between July 2006 to October 2018
- Breach History – Include 2011 when hackers gained control of NASA’s Jet Propulsion Laboratory, 2013 when eight of its web domains were compromised, and 2016 when hackers stole 250 GB of data and altered flight path of $222 million drone
- Impact Unknown – Agency cannot tell yet impact of breach and how many employees were affected, with investigation taking lots of time
- Planned Actions – Once affected employees are identified, NASA will offer identity protection services and other related resources to past and present employees as deemed appropriate
|
Accelerator
|
|
Sector
|
Government (excluding military)
|
Organization
|
NASA, NASA Jet Propulsion Laboratory (JPL)
|
Source
|
|
Original Publication Date
|
December 20, 2018
|