IT Security Stories to Watch: OPM Data Breach Update

Remember the U.S. Office of Personnel Management (OPM) data breach that was reported earlier this month? OPM officials last week said the incident now appears to have affected millions of federal employees and contractors.

And as a result, the OPM once again tops this week’s list of IT security news makers to watch, followed by Microsoft (MSFT), the “Punkey” malware and Blue Shield of California.

What can managed service providers (MSPs) and their customers learn from these IT security news makers? Check out this week’s list of IT security stories to watch to find out:

1. Chinese hackers target federal personnel files

OPM officials reported that Chinese hackers were able to illegally access a database that contained sensitive security clearance information for millions of federal employees and contractors, according to The Washington Post.

The Associated Press noted that 4 million past and present federal workers may have been affected by the data breach. This incident also is being investigated as a national security matter.

“This is potentially devastating from a counter­intelligence point of view,” counterintelligence expert Joel Brenner said. “These [databases] contain decades of personal information about people with clearances … which makes them easier to recruit for foreign espionage on behalf of a foreign country.”

2. Microsoft classifies Ask Toolbar as malware

Microsoft has officially labeled the Ask Toolbar as malware.

Going forward, Microsoft’s anti-malware software can detect the Ask Toolbar and remove it from a computer.

Ubergizmo reported that Microsoft classified the Ask Toolbar as malware due to the software’s ability to take control of a web browser and its ability to change settings.

3. Introducing the Punkey malware

The FBI is warning retailers about a new point-of-sale (POS) malware that could affect retailers – Punkey.

Credit Union Times pointed out that this malware (named after the TV character Punky Brewster) recently was used to infiltrate an unnamed restaurant chain and could be used to steal financial data.

“Cybercriminals continue to deploy point-of-sale malware due to the number of targets connected to the Internet and large potential profits,” the FBI said in its alert. “In the past year, there has been an increase in restaurants, casinos, hotels and resorts targeted by POS malware. Cybercriminals infect victim networks to extract credit card information and quickly monetize it within cybercriminal forums.”

4. Blue Shield of California gets breached

Blue Shield of California officials are reporting a data breach that may have affected 843 members.

The Desert Sun said Blue Shield of California member information was compromised last month, and hackers were able to access members’ first and last names, Blue Shield identification numbers, dates of birth and home addresses.

Blue Shield of California is notifying all members who were impacted by the breach.

What do you think will be the biggest IT security stories for MSPs this week? Share your thoughts in the Comments section below, via Twitter @dkobialka or email me at [email protected].