Pentagon IT Service Provider Hacked: U.S. Government Secrets Exposed

In Cybersecurity News - Original News Source is cybersecuritynews.com by Blog Writer

Post Sharing

Leidos Holdings Inc., one of the largest IT services providers to the U.S. government, experienced a significant cybersecurity breach. Hackers leaked internal documents, raising concerns about the security of sensitive government data managed by third-party contractors.

Leidos, known for its extensive work with the Pentagon and other federal agencies, was the largest federal IT contractor in the 2022 fiscal year, with $3.98 billion in contract obligations.

The company’s clients include the Defense Department, the Department of Homeland Security, NASA, other U.S. and foreign agencies, and commercial businesses. Contracts with the U.S. government constitute 87% of Leidos’ revenue.

Join our free webinar to learn about combating slow DDoS attacks, a major threat today.

The leaked documents are believed to have been stolen as part of two breaches of Diligent Corp. in 2022, a platform Leidos used. The nature and sensitivity of the stolen documents remain unclear, but the leak underscores vulnerabilities in the cybersecurity frameworks of companies handling critical government information.

Claim of leaked data

Leaked documents were found on a cybercrime forum. Bloomberg News reviewed some of the files but couldn’t verify their authenticity due to obscured details. The exact content and nature of these documents have not been publicly disclosed.

Document nature

According to Bloomberg News, Leidos recently became aware of the issue and is actively investigating the extent of the breach. The company has not yet made a public statement regarding the specifics of the leaked documents or the steps it is taking to mitigate the impact. Leidos has declined to comment on the stolen information.

The threat actor responsible for the breach has indicated plans to sell the data in two different types, further exacerbating concerns over the potential misuse of sensitive information. This incident has prompted a broader discussion on government contractors’ security measures and protocols.

The consequences of such data breaches are far-reaching, including financial losses, reputational damage, operational disruptions, and legal complications.

Cybersecurity experts warn that breaches like this can seriously damage consumer trust and make organizations face intense scrutiny from regulators and customers.

Leidos, formed in 2013 and later acquiring Lockheed Martin Corp.’s information technology business, plays a crucial role in national security through its IT services and solutions.

The recent security breach has prompted the company to take immediate action to evaluate the extent of the damage and to strengthen its defenses against future attacks.

Protect Your Business Emails From Spoofing, Phishing & BEC with AI-Powered Security | Free Demo