U.S. Customs Data Breach Is Latest 3rd-Party Risk, Privacy Disaster

A subcontractor for U.S. Customs and Border Protection (identified as Perceptics) transferred copies of license-plate and traveler images to its corporate network and then suffered a malicious cyber-attack that resulted in the leak of images (fewer than 100,000) collected at a single land-border Port of Entry over a 1.5-month period; the report highlights privacy concerns, third-party risk management failures, and calls for greater transparency and oversight of contractors handling sensitive government data.