So everyone’s talking about the FBI data hack, but they’re making assumptions about the FBI itself that may be unfounded.
The story is that ShinyHunters claims to have accessed data from FBIJobs.gov. Obviously whenever you apply for a job, you end up providing a lot of personally identifiable information. And sometimes the information can get REALLY personal.
According to Tech Insider, the FBI has now confirmed the hack occurred.
“According to reporting from PBS NewsHour and NBC News, the bureau said it is ‘aware of a cyber-criminal enterprise group claiming a compromise of the FBIJobs.gov portal and alleged impact to FBI employee personally identifiable information.'”
Aha, everyone says. Someone hacked the FBI!
But the FBI also said something else.
“The FBI added that ‘we are actively and aggressively investigating this matter and working closely with those third-party providers that support FBIJobs.gov to mitigate any and all risk.'”
This raises the possibility that the hackers didn’t get the FBI, but one of the “third-party providers.”
Kinda like how someone hacked Hertz information, but actually hacked the third-party provider IDScan.net.
Third party risk management (TPRM) is a critical part of your cybersecurity posture. You’d better make sure yours is robust before you’re the victim of a hack.
Are you a TPRM provider who implements solutions for identity, biometric, and technology firms? Or are you a firm who incorporates TPRM into your processes to protect customer data? Then I can help you communicate your solution to convince your customers of the safety of their data. Learn about Bredemarket at https://bredemarket.com/watch-book/.