Can We Give Him Another Nobel Prize Yet?

Of course.

The government didn't discover the hack-- an outside (private) company discovered it, in demonstrating a product.

As officials of the Obama administration announced that millions of sensitive records associated with current and past federal employees and contractors had been exposed by a long-running infiltration of the networks and systems of the Office of Personnel Management on June 4, they claimed the breach had been found during a government effort to correct problems with OPM's security. An OPM statement on the attack said that the agency discovered the breach as it had "undertaken an aggressive effort to update its cybersecurity posture." And a DHS spokesperson told Ars that "interagency partners" were helping the OPM improve its network monitoring "through which OPM detected new malicious activity affecting its information technology systems and data in April 2015."

Those statements may not be entirely accurate.

What?

Do you know how crazy you sound right now?

According to a Wall Street Journal report, the breach was indeed discovered in April. But according to sources who spoke to the WS''s Damian Paletta and Siobhan Hughes, it was in fact discovered during a sales demonstration of a network forensics software package called CyFIR by its developer, CyTech Services. "CyTech, trying to show OPM how its cybersecurity product worked, ran a diagnostics study on OPM’s network and discovered malware was embedded on the network," Paletta and Hughes reported.

Update: From @comradearthur -- Time, 2012.

They're just such geniuses, it's a wonder to me we don't just elect the media to run everything.

Who's down with other people's personnel files?

posted by Ace at 08:27 PM

| Access Comments