Chaffetz Criticizes OPM on Pace of Response to Info Requests on 2015 Data Breaches
House Oversight Committee Chairman Jason Chaffetz, R-Utah, criticized the Office of Personnel Management Thursday for not providing what he views as sufficient information to the committee on data that contractor CyTech gathered in an inspection of OPM’s networks prior to…
Sign up for a free preview to unlock the rest of this article
Export Compliance Daily combines U.S. export control news, foreign border import regulation and policy developments into a single daily information service that reliably informs its trade professional readers about important current issues affecting their operations.
the June disclosure of two breaches that exposed personally identifiable information (PII) stored on the networks. The breaches, revealed in June, exposed Social Security numbers and other PII belonging to more than 21 million people who were involved in federal background checks. OPM wiped information that CyTech’s CyFIR digital forensics tool gathered during the OPM networks inspection before the agency returned the tool to CyTech. “We’ve been asking for months” for the information CyTech gathered in its inspection of OPM’s networks, Chaffetz said Thursday during a House Oversight hearing. “It’s in your systems. We know it because we’re looking at hard copies. And we’re checking to see if you give it to us as well. And you’re not. And that’s why you’re going to be back before this committee.” OPM has attempted to “provide a response to every question that's been asked,” said Office of Congressional, Legislative and Intergovernmental Affairs Director Jason Levine. “We do expect another set of documents coming” in January “if not in the next couple weeks.” OPM has in the past “been challenged with this level of a document production” but is now prioritizing document requests to Congress, Levine said.