Hackers Accessed 632,000 Email Addresses at US Justice, Defense Departments
- Federal report gives new details on scope of MOVEit attack
- Email addresses, links to surveys among compromised data
The eight-page report said hackers were able to obtain access to the data by exploiting vulnerability in the MOVEit file transfer program.
Photographer: SeongJoon Cho/BloombergA Russian-speaking hacking group obtained access to the email addresses of about 632,000 US federal employees at the departments of Defense and Justice as part of the sprawling MOVEit hack last summer, according to a report on the wide-ranging attack obtained through a Freedom of Information Act request.
The report, by the US Office of Personnel Management, provides new details about a cyberattack in which hackers exploited flaws in MOVEit, a popular file-transfer tool. Federal cybersecurity officers previously confirmed that government agencies were compromised by the attack but have provided little information on the scope of the attack, nor did they name the agencies affected.