OT: Public Notice SF86 Data Breach

Submitted by Esterhaus on

 

Some here - national security clearance applicants and holders - likely will now need to monitor their financial and other formally private records for the rest of their lives. According to published reports, suspected Chinese hackers have accessed and downloaded  the personally identifiable information (closely held private) for every person referenced during the SF86 disclosure process even if you weren't the submitter. This post is simply to notify every person here that if you were ever named in an SF86 application that your records are at risk. Good luck.

Njia

June 12th, 2015 at 7:28 AM ^

My employer asked me to get a clearance at the beginning of the year. I provided enough info to set me up on e-QIP, which is already enough to let an identity thief have a field day. Fortunately, I never had the time to fill out the SF86, so that gives me a measure of comfort, but not much.

Njia

June 12th, 2015 at 10:11 AM ^

I had an old clearance that did come up in the system, so I knew I was probably vulnerable... The question at this point is whether I make that bad news public to my wife.

To paraphrase a friend of mine, I doubt there will be much impact ... Though I did notice that my 401K was now reporting in Yuans and I'm heavily invested in Shanghai securities.

Blazefire

June 11th, 2015 at 9:42 PM ^

but other than screwing with the US economy - something China probably DOESN'T want to do - as most of their county's businesses depend on US citizens with disposable income, what the heck do they plan on doing with this information?

"Muahahaha! We now know that you, Jim Smith, were born in Columbia, South Carolina in 1976 - and you skipped out on the last three payments on your first car, a 1983 Toyota Tercel! For shame, sir. For shame."

Blazefire

June 11th, 2015 at 9:55 PM ^

I get why they WANT it, it looks good. But what do they actually plan to do with it? I mean, are they planning kidnappings or wire tappings to try and get information for an invasion? As nutty as the Chinese govt is, I don't think they have invasion on the brain, so this information ultimately becomes an empty victory.

Esterhaus

June 11th, 2015 at 10:16 PM ^

 
If I have your information I can send the IRS and local tax authorities deceptive information with you named as the responsible party. The tax authorities' responses and your exchange are certain to cut into your productivity and possibly your confidence in the government. Now I can do this to your neighbors or anyone named in a submission, too. The prospective disruption is massive and irremediable almost. This is huge.

mjv

June 12th, 2015 at 9:40 AM ^

It would be impossible for the Chinese to do something that would cut into the confidence I have in our government.  Our government has done a splendid job of that on their own since 9/11.  
 
Now maybe a full pardon for Snowden and some respect for the Constitution and I'll start warming up to the oligarchs in DC.

NYWolverine

June 12th, 2015 at 10:51 AM ^

For every problem, there's a solution. The solution may not be ideal, but it'll be better than an "oh well".

If you're an impacted person, the government will have to mark your file with each federal and state department reliant on any disclosed information for greater scrutiny re: record changes. With respect to personal usage of private information, such as obtaining a loan, credit reports will determine whether you're compromised; and while annoying, you would simply go through the process of disputing charges. If the government has your file marked, it's a bullet in the chamber for a faster review process. 

I'm over-simplifying, but isn't this more or less where the conversation would have to start?

Ultimately, I think this report just confirms what we all kind of anticipated, unless our heads were buried in the sand. The internet and electronic filing systems are not Fort Knox. Everything stored online is as good as public, because smart a**holes growing up on computers are going to find a way to hack into stuff. 

What really changes? Be as careful as you can with your personal information; and don't knowingly post compromising material online or in electronic storage. For everything else, there's a solution. If anything, it gives you greater leverage to dispute stuff; and disputing stuff often leads to being in a better position than you were before. Lawyer up and be careful out there.

A2YpsiBlue

June 12th, 2015 at 12:28 AM ^

I know one of the guys who writes for them & he is a 100% real world bad ass.  That article is only one of a bunch I've seen getting at the same thing so that isn't a stand alone article.  

China doesn't want to "take us over," much less invade the US - as long as they can keep us buying cheap crap from them while they dictate the trade which goes through the South China Sea (something like 6.3 trillion goes through there annually which is more than the Suez & Panama Canals combined), they will be happy as they dominate the region and their people stay employed & relatively content.  

Don't believe me about trying to take over the South China Sea?  Here is a quick link:  http://www.foxnews.com/politics/2015/05/09/defense-department-warns-chi…

runandshoot

June 11th, 2015 at 9:43 PM ^

...a credit card vendor that a bunch of wineries in Napa Valley uses was hacked and a bunch of credit card numbers, addresses and some other information was stolen.

Seems like hackers have gotten a step ahead of the data management services and their security safeguards. Time for these companies to tighten up their security and move back ahead of the hackers.

MichiganStudent

June 11th, 2015 at 9:44 PM ^

And this is why I write cyber insurance. I feel for all the people affected, but it's now become a business of not if but when.

A2YpsiBlue

June 11th, 2015 at 11:20 PM ^

Without disclosing names, I work for a software company & was on a plane next to a guy who handles security for one of the major US banks & I had a long discussion with him about IT security... or rather, the lack thereof.  A direct quote from him about the Chinese hacking everything in sight is "don't worry, they are in your systems, they are in our systems, and they are in everyone's systems."  

I don't want to sound like a conspiracy theorist but, given the recent headlines & conversations like what I listed above, I strongly encourage you to have some extra cash on hand (aka $200 - $1,000 depending on what you can swing, more is better) should our banking system get compromised.  

A2YpsiBlue

June 11th, 2015 at 11:45 PM ^

If there is more than a momentary blip, yes - hard goods which can be bartered for are far better.  Water is most important (as you die from thirst much sooner than hunger), followed by food, medicine, etc.  Doesn't hurt to be packing & know how to use it, too.  

Wolverine In Exile

June 11th, 2015 at 9:48 PM ^

From a national security perspective since Snowden. There are a lot of protected identities at risk now within federal service, and I'm telling my guys in my building to basically consider that they now exist in a database in potentially adversarial nation(s) with enough detail to be detained as a spy upon entry. And I work in an overt national security entity. I'm worried about guys who have kept their affiliation with national security as a contractor, researcher, academic, etc secret.