Army database may have been breached

An Army database that contains personal information about nearly 1,600 soldiers may have been penetrated by unauthorized users, Army officials have announced.

Soldiers who registered with, or participated in, the Army-sponsored Operation Tribute to Freedom program during the past five years may be affected by the security breach, Army officials said March 10. The service is notifying those soldiers about the issue through e-mail messages and letters.

The information that may have been breached includes the service members' names, e-mail messages, phone numbers, home addresses, awards received, ranks, gender, ethnicity, and dates the soldiers deployed and returned from their deployment, Army officials said.

Only information that was provided at the time of registration was potentially compromised, officials said. The Criminal Investigation Command is investigating how the password-protected, secure Web-based information was penetrated.

Operation Tribute to Freedom  lets soldiers share their stories with the public. The program’s speakers service helps event coordinators find the soldiers for events and the service members speak about their experiences in Iraq and Afghanistan.

About the Author

Doug Beizer is a staff writer for Federal Computer Week.

The Fed 100

Save the date for 28th annual Federal 100 Awards Gala.

Featured

  • Rep. Gerald Connolly

    Connolly warns on workforce changes

    The ranking member of the House Oversight Committee's Government Operations panel warns that Congress will look to legislate changes to the federal workforce.

  • President Donald J. Trump delivers his inaugural address

    How will Trump lead on tech?

    The businessman turned reality star turned U.S. president clearly has mastered Twitter, but what will his administration mean for broader technology issues?

  • Login.gov moving ahead

    The bid to establish a single login for accessing government services is moving again on the last full day of the Obama presidency.

  • Shutterstock image (by Jirsak): customer care, relationship management, and leadership concept.

    Obama wraps up security clearance reforms

    In a last-minute executive order, President Obama institutes structural reforms to the security clearance process designed to create a more unified system across government agencies.

  • Shutterstock image: breached lock.

    What cyber can learn from counterterrorism

    The U.S. has to look at its experience in developing post-9/11 counterterrorism policies to inform efforts to formalize cybersecurity policies, says a senior official.

  • FCW magazine

    What to make of the Alliant 2 protest rulings

    With the pre-award protests all resolved in GSA's favor, is the $50 billion IT services contract now bulletproof?

Reader comments

Mon, Mar 16, 2009 darwin

SSL encrypts the network(ip) packets between the browser and the webserver. SSL is very easy and cheap to implement. However, the level of effort that goes into protecting the server (and it's database/data) itself is largely unknown by the surfer. So, yea, if you see a website can't be bothered to even use SSL, then it may be a tip of the iceberg.

Mon, Mar 16, 2009 ~SouLvo!D~

the SSH that is used is just a different type of security used. its not potentially different from any other SSH used. The problem is in the amount of data allowed to access the networks. Other types of security issues exist as well. The Army needs to include more individuals who specialize in this expertise in their operations. Every type of company needs to realize the risk involved when their security/IT dept. is under financed and appreciated. Let this be a lesson to any business. Focus on IT and stop under financing operations.

Mon, Mar 16, 2009

This is not a surprise. I was on one of their web sites and their were issues with the certificates for their SSL. Needless, to say I contacted them and explained the issue. I got a response back saying that I should not worry about it. I wasn't convinced and did not use their SSL services. Is some education needed here??? When my broswer stops me from going to a site and advises me not due to certificate erros, taht's not a good thing.

Please post your comments here. Comments are moderated, so they may not appear immediately after submitting. We will not post comments that we consider abusive or off-topic.

Please type the letters/numbers you see above

More from 1105 Public Sector Media Group