Army database may have been breached

An Army database that contains personal information about nearly 1,600 soldiers may have been penetrated by unauthorized users, Army officials have announced.

Soldiers who registered with, or participated in, the Army-sponsored Operation Tribute to Freedom program during the past five years may be affected by the security breach, Army officials said March 10. The service is notifying those soldiers about the issue through e-mail messages and letters.

The information that may have been breached includes the service members' names, e-mail messages, phone numbers, home addresses, awards received, ranks, gender, ethnicity, and dates the soldiers deployed and returned from their deployment, Army officials said.

Only information that was provided at the time of registration was potentially compromised, officials said. The Criminal Investigation Command is investigating how the password-protected, secure Web-based information was penetrated.

Operation Tribute to Freedom  lets soldiers share their stories with the public. The program’s speakers service helps event coordinators find the soldiers for events and the service members speak about their experiences in Iraq and Afghanistan.

About the Author

Doug Beizer is a staff writer for Federal Computer Week.

FCW in Print

In the latest issue: Looking back on three decades of big stories in federal IT.

Featured

  • FCW @ 30 GPS

    FCW @ 30

    Since 1986, FCW has covered it all -- the major contracts, the disruptive technologies, the picayune scandals and the many, many people who make federal IT function. Here's a look back at six of the most significant stories.

  • Shutterstock image.

    A 'minibus' appropriations package could be in the cards

    A short-term funding bill is expected by Sept. 30 to keep the federal government operating through early December, but after that the options get more complicated.

  • Defense Secretary Ash Carter speaks at the TechCrunch Disrupt conference in San Francisco

    DOD launches new tech hub in Austin

    The DOD is opening a new Defense Innovation Unit Experimental office in Austin, Texas, while Congress debates legislation that could defund DIUx.

  • Shutterstock image.

    Merged IT modernization bill punts on funding

    A House panel approved a new IT modernization bill that appears poised to pass, but key funding questions are left for appropriators.

  • General Frost

    Army wants cyber capability everywhere

    The Army's cyber director said cyber, electronic warfare and information operations must be integrated into warfighters' doctrine and training.

  • Rising Star 2013

    Meet the 2016 Rising Stars

    FCW honors 30 early-career leaders in federal IT.

Reader comments

Mon, Mar 16, 2009 darwin

SSL encrypts the network(ip) packets between the browser and the webserver. SSL is very easy and cheap to implement. However, the level of effort that goes into protecting the server (and it's database/data) itself is largely unknown by the surfer. So, yea, if you see a website can't be bothered to even use SSL, then it may be a tip of the iceberg.

Mon, Mar 16, 2009 ~SouLvo!D~

the SSH that is used is just a different type of security used. its not potentially different from any other SSH used. The problem is in the amount of data allowed to access the networks. Other types of security issues exist as well. The Army needs to include more individuals who specialize in this expertise in their operations. Every type of company needs to realize the risk involved when their security/IT dept. is under financed and appreciated. Let this be a lesson to any business. Focus on IT and stop under financing operations.

Mon, Mar 16, 2009

This is not a surprise. I was on one of their web sites and their were issues with the certificates for their SSL. Needless, to say I contacted them and explained the issue. I got a response back saying that I should not worry about it. I wasn't convinced and did not use their SSL services. Is some education needed here??? When my broswer stops me from going to a site and advises me not due to certificate erros, taht's not a good thing.

Please post your comments here. Comments are moderated, so they may not appear immediately after submitting. We will not post comments that we consider abusive or off-topic.

Please type the letters/numbers you see above

More from 1105 Public Sector Media Group