A government watchdog hacked a US federal agency to stress-test its cloud security

An Office of Inspector General assessment found testers could exfiltrate more than 1GB of synthetic personal data from the Department of the Interior’s cloud without detection, revealing failures in data loss prevention, logging, and control testing; the exercise was controlled and used fake data, and the OIG report provides remediation recommendations to reduce risk to federal employee information.