Security News > 2023 > March > FBI investigates data breach impacting U.S. House members and staff
The FBI is investigating a data breach affecting U.S. House of Representatives members and staff after their account and sensitive personal information was stolen from DC Health Link's servers.
DC Health Link is the organization that administers the health care plans of U.S. House members, their staff, and their families.
Impacted individuals were notified today of the breach in an email from Catherine L. Szpindor, the U.S. House Chief Administrative Officer, as first reported by DailyCaller.
"DC Health Link suffered a significant data breach yesterday potentially exposing the Personal Identifiable Information of thousands of enrollees. As a Member or employee eligible for health insurance through the D.C. Health Link, your data may have been comprised," Szpindor said.
"Currently, I do not know the size and scope of the breach, but have been informed by the Federal Bureau of Investigation that account information and Pit of hundreds of Mernber and House staff were stolen."
While the email sent by House CAO Szpindor doesn't have any details regarding the stolen data, BleepingComputer discovered that at least one threat actor is selling the U.S. House members' information stolen from DC Health Link's servers on a hacking forum.
News URL
Related news
- A data leak and a data breach (source)
- U.S. govt agency CMS says data breach impacted 3.1 million people (source)
- Dutch Police: ‘State actor’ likely behind recent data breach (source)
- Comcast and Truist Bank customers caught up in FBCS data breach (source)
- Internet Archive hacked, data breach impacts 31 million users (source)
- Internet Archive data breach, defacement, and DDoS: Users’ data compromised (source)
- Fidelity Investments says data breach affects over 77,000 people (source)
- Fidelity Data Breach Exposes Data of Over 77,000 Customers (source)
- USDoD hacker behind National Public Data breach arrested in Brazil (source)
- Tech giant Nidec confirms data breach following ransomware attack (source)