Deloitte is disputing claims that a recently discovered hack on their server exposed the information of government agencies, as was reported Tuesday by The Guardian.<\/p>\n\n\n\n
\u201cWe are confident that we know what information was targeted and what the hacker actually did. Very few clients \u2015 none from the government \u2015 were impacted,\u201d Deloitte spokeswoman Megan Doern told Federal Times.<\/p>\n\n\n\n
According to an anonymous source in the Guardian article, the breach impacted data from as many as 350 clients, which included the U.S. Departments of State, Energy, Homeland Security and Defense, as well as the U.S. Postal Service and the National Institutes of Health.<\/p>\n\n\n\n
Deloitte, however, said that none of the clients they discovered to be impacted over the course of their investigation included government agencies.<\/p>\n\n\n\n
\u201cAn attacker compromised account credentials and ultimately gained access to a single Deloitte cloud-based email platform,\u201d Deloitte said in an official statement. \u201cOn discovering unauthorized access to the email platform, we initiated our standard and comprehensive incident response process, which included mobilizing a team of cybersecurity and confidentiality experts inside and outside of Deloitte (including Mandiant).\u201d<\/p>\n\n\n\n
According to the statement, the attacker focused on obtaining active credentials in a cloud-based email platform, and is no longer in the system. Deloitte manually combed through affected emails to determine the extent of the sensitive information exposed.<\/p>\n\n\n\n
\u201cBy conducting this eyes-on review, we were able to determine the very few instances where there may have been active credentials, personal information or other sensitive information that had an impact on clients,\u201d the statement said, elaborating that the company contacted both affected clients and government authorities.<\/p>\n\n\n\n
However, anonymous sources told both the Guardian and KrebsOnSecurity that the hack was more widespread than Deloitte first acknowledged, and that the company could not possibly know the full amount of data that was taken when the hacker was in the system for approximately a year.<\/p>\n\n\n\n
Deloitte, however, told Federal Times that they\u201d dispute in the strongest terms that Deloitte is \u2018downplaying\u2019 the breach. We take any attack on our systems very seriously. We are confident that we know what information was targeted and what the hacker actually did. Very few clients were impacted, although we want to stress that even when one client is impacted, that is one client too many. We have concluded that the attacker is no longer in Deloitte\u2019s systems and haven\u2019t seen any signs of any subsequent activities. Our review determined what the hacker actually did, and it did not show that material \u2018disappeared\u2019 into a server in London.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"
Deloitte said that none of the clients they discovered to be impacted over the course of their investigation included government agencies.<\/p>\n","protected":false},"author":7,"featured_media":32436,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":3574,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":[]},"categories":[104,3574,106,12,31,110,14,33],"tags":[],"coauthors":[2853],"class_list":["post-15186","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-acquisition-update","category-cyber","category-daily-brief","category-govcon","category-home","category-it-cloud-report","category-it-networks","category-newsletters"],"acf":{"subheadline":"","legacy_arc_id":"HWABM2FHJRDBLEBUCTLJX72JLY","arc_canonical_url":"\/cyber\/2017\/10\/11\/deloitte-disputes-reports-that-government-clients-were-impacted-in-data-breach\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"\n