Army database may have been breached

An Army database that contains personal information about nearly 1,600 soldiers may have been penetrated by unauthorized users, Army officials have announced.

Soldiers who registered with, or participated in, the Army-sponsored Operation Tribute to Freedom program during the past five years may be affected by the security breach, Army officials said March 10. The service is notifying those soldiers about the issue through e-mail messages and letters.

The information that may have been breached includes the service members' names, e-mail messages, phone numbers, home addresses, awards received, ranks, gender, ethnicity, and dates the soldiers deployed and returned from their deployment, Army officials said.

Only information that was provided at the time of registration was potentially compromised, officials said. The Criminal Investigation Command is investigating how the password-protected, secure Web-based information was penetrated.

Operation Tribute to Freedom  lets soldiers share their stories with the public. The program’s speakers service helps event coordinators find the soldiers for events and the service members speak about their experiences in Iraq and Afghanistan.

About the Author

Doug Beizer is a staff writer for Federal Computer Week.

The Fed 100

Save the date for 28th annual Federal 100 Awards Gala.

Featured

  • computer network

    How Einstein changes the way government does business

    The Department of Commerce is revising its confidentiality agreement for statistical data survey respondents to reflect the fact that the Department of Homeland Security could see some of that data if it is captured by the Einstein system.

  • Defense Secretary Jim Mattis. Army photo by Monica King. Jan. 26, 2017.

    Mattis mulls consolidation in IT, cyber

    In a Feb. 17 memo, Defense Secretary Jim Mattis told senior leadership to establish teams to look for duplication across the armed services in business operations, including in IT and cybersecurity.

  • Image from Shutterstock.com

    DHS vague on rules for election aid, say states

    State election officials had more questions than answers after a Department of Homeland Security presentation on the designation of election systems as critical U.S. infrastructure.

  • Org Chart Stock Art - Shutterstock

    How the hiring freeze targets millennials

    The government desperately needs younger talent to replace an aging workforce, and experts say that a freeze on hiring doesn't help.

  • Shutterstock image: healthcare digital interface.

    VA moves ahead with homegrown scheduling IT

    The Department of Veterans Affairs will test an internally developed scheduling module at primary care sites nationwide to see if it's ready to service the entire agency.

  • Shutterstock images (honglouwawa & 0beron): Bitcoin image overlay replaced with a dollar sign on a hardware circuit.

    MGT Act poised for a comeback

    After missing in the last Congress, drafters of a bill to encourage cloud adoption are looking for a new plan.

Reader comments

Mon, Mar 16, 2009 darwin

SSL encrypts the network(ip) packets between the browser and the webserver. SSL is very easy and cheap to implement. However, the level of effort that goes into protecting the server (and it's database/data) itself is largely unknown by the surfer. So, yea, if you see a website can't be bothered to even use SSL, then it may be a tip of the iceberg.

Mon, Mar 16, 2009 ~SouLvo!D~

the SSH that is used is just a different type of security used. its not potentially different from any other SSH used. The problem is in the amount of data allowed to access the networks. Other types of security issues exist as well. The Army needs to include more individuals who specialize in this expertise in their operations. Every type of company needs to realize the risk involved when their security/IT dept. is under financed and appreciated. Let this be a lesson to any business. Focus on IT and stop under financing operations.

Mon, Mar 16, 2009

This is not a surprise. I was on one of their web sites and their were issues with the certificates for their SSL. Needless, to say I contacted them and explained the issue. I got a response back saying that I should not worry about it. I wasn't convinced and did not use their SSL services. Is some education needed here??? When my broswer stops me from going to a site and advises me not due to certificate erros, taht's not a good thing.

Please post your comments here. Comments are moderated, so they may not appear immediately after submitting. We will not post comments that we consider abusive or off-topic.

Please type the letters/numbers you see above

More from 1105 Public Sector Media Group