Hanna, Cartwright Introduce Bill to Help Federal Government Data Breach Victims

Press Release

U.S. Representatives Richard Hanna (R-NY) and Matt Cartwright (D-PA) this week introduced a bipartisan bill to help protect victims of the massive government data breach.

The bill, H.R. 3000, A Necessary and Targeted Impediment to Viruses Act (ANTI Virus), requires hacked government agencies that lost control over personally identifiable information to provide victims with personal licenses for one year's worth of antivirus software to help protect them from subsequent, related attacks. The recent breaches of the Office of Personnel Management (OPM) are only the latest compromises of federal networks. These attacks can have devastating effects; current estimates claim more than 21 million current and former federal employees' identity, background and Social Security information may have been compromised.

Right in the Mohawk Valley, more than 200 current federal employees at the Defense Finance and Accounting Services (DFAS) in Rome have been impacted by the breach.

To date, the most common response to government data breaches has been to offer victims at most 18 months-worth of credit monitoring. While this service is important, it does not protect against further infiltrations of personal networks that are more likely to occur once an individual's personal data has been obtained.

While the attacker's ultimate goals are often unknown, their possession of victims' sensitive information increases the possibility and severity of a subsequent attacks via a method known as "spear phishing." This tactic involves sending targeted email messages crafted to appear like something they would expect from someone they know and trust, enticing them to open the message and infecting their computer with viruses known as "malware." Once compromised, hackers can steal bank account, email, travel dates and other private information, subjecting the victim to yet more attacks and our national security to new threats.

"The recent data breaches at OPM and other government agencies have placed federal employees at an increased risk of phishing attacks, which jeopardizes our national security," Rep. Hanna said. "Providing these employees with adequate safeguards to protect themselves against viruses is a critical step in ensuring sensitive data is not further exposed."

Source