logo

The curious story of Uncle Sam's HR dept, a hastily set up email server, and fears of another cyber disaster

ID: 6dbfd578-f7d5-5bc5-b140-1b656f11e557

STIX ID: report--6dbfd578-f7d5-5bc5-b140-1b656f11e557

Feed Name: The Register (Security)

Date Published: 2025-01-29

Date Updated: 2026-04-26

Author: Thomas Claburn, Chris Williams, and Iain Thomson

...
...

Two anonymous federal employees sued the US Office of Personnel Management, alleging it hastily deployed an on‑premises centralized [email protected] email system without the legally required privacy impact assessment, sending “test” messages that solicited replies and potentially building a list of all federal workers, thereby creating significant security and PII risk. The suit references internal claims that the CIO was ousted for resisting the rollout, notes a past OPM breach for context, and warns that the ad‑hoc server and “trusted” messaging could be abused amid broader workforce overhaul efforts.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.