The United States Government Accountability Office reported that CGI Federal, an IT contractor and unit of CGI Inc., notified the agency of a data breach that affected around 6,000 current and former GAO employees.
The United States Government Accountability Office announced Monday that CGI Federal, an IT contractor and unit of CGI Inc., warned the agency of a data breach last month that affected around 6,000 present and former GAO workers.
The GAO, Congress’s research arm, said in a statement that the data contained personally identifiable information about employees, including some who worked there from 2007 to 2017.
A breach notice letter stated that the data included “names, social security numbers, addresses, and some banking information.” The letter stated that the intrusion was carried out by a “threat actor exploiting a vulnerability in an externally provided platform” but did not go into detail.
Chuck Young, a GAO spokeswoman, said his agency was aware of the intrusion on January 17 but addressed queries about its impact on CGI. CGI Federal did not immediately respond to inquiries seeking comment.
CGI, which has focused on cybersecurity in recent years, has a number of contracts with the federal government. In recent congressional testimony, a CGI representative stated that the company has offered IT protection to “100 participating agencies” via the US cybersecurity agency responsible for securing federal networks.
In the same evidence, GCI stated that it offered cybersecurity services to the State, Justice, Commerce, and Labor departments, as well as the Federal Communications Commission and the US Agency for International Development.
The FBI did not immediately respond to emails.
Also read: Scaling Security in Startups: CISOs View
Do Follow: CIO News LinkedIn Account | CIO News Facebook | CIO News Youtube | CIO News Twitter
About us:
CIO News, a proprietary of Mercadeo, produces award-winning content and resources for IT leaders across any industry through print articles and recorded video interviews on topics in the technology sector such as Digital Transformation, Artificial Intelligence (AI), Machine Learning (ML), Cloud, Robotics, Cyber-security, Data, Analytics, SOC, SASE, among other technology topics.
