Security News > 2023 > February > US Marshals Service leaks ‘law enforcement sensitive information’ in ransomware incident
![US Marshals Service leaks ‘law enforcement sensitive information’ in ransomware incident](/static/build/img/news/us-marshals-service-leaks-law-enforcement-sensitive-information-in-ransomware-incident-medium.jpg)
The US Marshals Service, the enforcement branch of the nation's federal courts, has admitted to a "Major" breach of its information security defenses allowed a ransomware infection and exfiltration of "Law-enforcement sensitive information".
NBC broke news of the incident, which Marshals Service spokesperson Drew Wade described as having impacted a system that "Contains law enforcement sensitive information, including returns from legal process, administrative information, and personally identifiable information pertaining to subjects of USMS investigations, third parties, and certain USMS employees."
The Register has asked the Service to confirm reports of the incident and to detail the nature of the attack, the duration of the incident, what remediations have been implemented, and whether systems have been restored.
The incident adds another to a long list of recent, serious, breaches of US government security.
That shame file includes the 2015 leak of four million employee records and data describing millions more people from the Office of Personnel Management, plenty of SolarWinds-related attacks in 2020, the July 2021 breach of the Federal Courts, the Iranian use of the Log4J vulnerability to attack US government targets, and the compromise of the US Cyber Ambassador's Twitter account in February 2023.
US government agencies have often struggled to implement guidance from Washington, as we discovered when NASA's auditor reported that the space agency has not hit deadlines to develop a proper software asset management plan.
News URL
Related news
- Ransomware disrupts Indonesia’s national data centre, LockBit gang claims US Federal Reserve breach (source)
- UK and US cops band together to tackle Qilin's ransomware shakedowns (source)
- US offers $10M for tips on DPRK hacker linked to Maui ransomware attacks (source)
- Ransom Cartel, Reveton ransomware owner arrested, charged in US (source)
- US accuses man of being 'elite' ransomware pioneer they've hunted for years (source)