A DHS Data Hub Exposed Sensitive Intel to Thousands of Unauthorized Users

A misconfiguration in the Department of Homeland Security's HSIN-Intel portal granted broad access to sensitive-but-unclassified intelligence between March and May 2023, resulting in 1,525 unauthorized accesses to 439 products by tens of thousands of users, including private contractors and foreign nationals; roughly 39% of the improperly accessed items were cybersecurity-related. The internal memo highlights failures in access controls and information security but does not report confirmed malicious exploitation of the exposed data.