DISA Global Solutions reports more than 3.3 million people affected by 2024 data breach, but questions remain

DISA Global Solutions disclosed a breach affecting ~3,332,750 individuals for activity occurring between February 9 and April 22, 2024; reporting and third-party commentary conflict over whether DISA engaged with or paid the unnamed threat actor to delete stolen data, and their forensics could not definitively identify what specific data was exfiltrated, leaving unanswered questions about scope and whether the data has been publicly released.