{"id":15479,"date":"2015-06-19T20:09:19","date_gmt":"2015-06-19T20:09:19","guid":{"rendered":"https:\/\/one.sightlinemg.com\/federaltimes\/uncategorized\/2015\/06\/19\/opm-breach-a-failure-on-encryption-detection\/"},"modified":"2026-08-08T04:42:14","modified_gmt":"2026-08-08T04:42:14","slug":"opm-breach-a-failure-on-encryption-detection","status":"publish","type":"post","link":"https:\/\/one.sightlinemg.com\/federaltimes\/smr\/opm-data-breach\/2015\/06\/19\/opm-breach-a-failure-on-encryption-detection\/","title":{"rendered":"OPM breach a failure on encryption, detection"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><img decoding=\"async\" alt=\"ID=28986283\" assetid=\"28986283\" assettype=\"image\" src=\"http:\/\/www.gannett-cdn.com\/-mm-\/0a10ddb80b8c9c24e18c27aa0734907500a0c723\/c=78-0-2775-2028&amp;r=115x86\/local\/-\/media\/2015\/06\/19\/FederalTimes\/FederalTimes\/635703168817731851-477322540.JPG\" style=\"font-size: 11.9999990463257px;\" title=\"635703168817731851-477322540[ID=28986283]\" width=\"245px\"\/><span>The biggest misstep in the breach of Office of Personnel Management networks was not the failure to block the initial breach but the lack of encryption, detection and other safeguards that should have prevented intruders from obtaining any useful information.<\/span><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The data stolen in the massive OPM breach was not protected by practices like data masking, redaction and encryption \u2014 all of which should become the norm, rather than the exception, Rep. Elijah Cummings, D-Md., said during a hearing held by the House Committee on Oversight and Government Reform.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&#8220;We cannot rely primarily on keeping the attackers out. We need to operate with the assumption that the attackers are already inside,&#8221; he noted.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><b>Part I: <\/b><a href=\"http:\/\/www.federaltimes.com\/story\/government\/omr\/opm-cyber-report\/2015\/06\/18\/prevent-opm-breach\/28931583\/\" title=\"http:\/\/www.federaltimes.com\/story\/government\/omr\/opm-cyber-report\/2015\/06\/18\/prevent-opm-breach\/28931583\/\">Could OPM have prevented the breach?<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">But OPM CIO Donna Seymour pointed to aging systems as the primary obstacle to putting such protections in place for certain systems, despite having the encryption tools on hand. As a result, data on at least 4.2 million current and former federal employees was compromised from one database and an untold number of background investigations were exposed in another.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&#8220;A lot of our systems are aged,&#8221; said Seymour. &#8220;Implementing some of these tools take time and some of them we cannot even implement in our current environment.&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Not all experts agree. Kurt Rohloff, associate professor at the New Jersey Institute of Technology and director of the NJIT Cybersecurity Center questioned the claim that legacy systems can&#8217;t support encryption.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><b>More: <\/b><a href=\"http:\/\/www.federaltimes.com\/story\/government\/omr\/opm-cyber-report\/2015\/06\/16\/opm-breach-house-hearing\/28819369\/\" title=\"http:\/\/www.federaltimes.com\/story\/government\/omr\/opm-cyber-report\/2015\/06\/16\/opm-breach-house-hearing\/28819369\/\">OPM&#8217;s laxity to blame for data breach, lawmakers say<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&#8220;The statement that legacy systems cannot encrypt may not be completely true,&#8221; Rohloff said. &#8220;It may be very expensive to integrate encryption technologies with legacy systems but it is generally possible.&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">OPM is currently &#8220;building a new architecture, a modern architecture that allows us to implement additional security features,&#8221; Seymour said, stating it is on schedule to be deployed this fall. Once that architecture is in place, the agency will be able to employ stronger data protection schemes, she said.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><b>More: <\/b><a href=\"http:\/\/www.federaltimes.com\/story\/government\/cybersecurity\/2015\/06\/15\/second-opm-hack\/71248268\/\" title=\"http:\/\/www.federaltimes.com\/story\/government\/cybersecurity\/2015\/06\/15\/second-opm-hack\/71248268\/\">Second OPM hack exposed highly personal background info<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Even if the information had been encrypted, that might not have been enough to stop attackers from getting usable data from this intrusion, OPM Director Katherine Archuleta told the committee, asking DHS Assistant Secretary for Cybersecurity and Communications Andy Ozment to explain further.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&#8220;If an adversary has the credentials of a user on the network, then they can access data even if it&#8217;s encrypted, just as the users on the network have to access data, and that did occur in this case,&#8221; Ozment said. &#8220;So encryption in this instance would not have protected this data.&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><b>More: <\/b><a href=\"http:\/\/www.federaltimes.com\/story\/government\/cybersecurity\/2015\/04\/14\/the-user-knows-nothing\/25776507\/\" title=\"http:\/\/www.federaltimes.com\/story\/government\/cybersecurity\/2015\/04\/14\/the-user-knows-nothing\/25776507\/\">The user knows nothing \u2014 Rethinking cybersecurity<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The only way to prevent malicious actors from obtaining useful data in this case would have been timely detection of the intrusion.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&#8220;It&#8217;s basically impossible for a target of any real size to be perfect across that whole exposed area,&#8221; said Richard Bejtlich, chief security strategist at FireEye and nonresidential senior fellow at the Brookings Institution. &#8220;When the intruder gets that first foothold, somebody has to notice and then react to contain the intruder before he can accomplish his mission.&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Despite the speed of computer processing, it still can take hours, days, maybe even weeks for bad actors to find their way around a system and effectively exfiltrate the data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&#8220;If at any point during that timeline you notice they got in \u2026 and you contain them, then you win, Bejtlich added. &#8220;That&#8217;s the difference between a breach where something catastrophic happens and unauthorized access, which is just getting that initial foothold.&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><b>Slideshow: <\/b><a href=\"http:\/\/www.federaltimes.com\/picture-gallery\/government\/cybersecurity\/2015\/06\/05\/breach-federal-data-intrusions-of-2015\/28541651\/\" title=\"http:\/\/www.federaltimes.com\/picture-gallery\/government\/cybersecurity\/2015\/06\/05\/breach-federal-data-intrusions-of-2015\/28541651\/\">Federal data intrusions of 2015<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">OPM was part of a second set of task orders on DHS&#8217;s Continuous Diagnostics and Mitigation (CDM) program, which gives agency&#8217;s the tools to track all the assets on their networks and detect anomalies. This functionality, coupled with identity and access management tools slated for the next phase of CDM, could have helped OPM spot the intruders.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><b>More: <\/b><a href=\"http:\/\/www.federaltimes.com\/story\/government\/cybersecurity\/2015\/04\/16\/39m-cdm-task-order-2b-awarded\/25872237\/\" title=\"http:\/\/www.federaltimes.com\/story\/government\/cybersecurity\/2015\/04\/16\/39m-cdm-task-order-2b-awarded\/25872237\/\">$39M CDM contract awarded for six major agencies<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Even if the hackers had valid credentials, if they were used from an unusual IP or were discovered accessing information in a database that user should not be in, OPM security officials could have seen something was amiss.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Unfortunately, the first phase of CDM implementation won&#8217;t be finished until later this year and solicitations for the second phase are <a href=\"http:\/\/www.federaltimes.com\/story\/government\/cybersecurity\/2015\/06\/03\/cdm-phase-ii-july\/28408961\/\" title=\"http:\/\/www.federaltimes.com\/story\/government\/cybersecurity\/2015\/06\/03\/cdm-phase-ii-july\/28408961\/\">slated for this summer<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&#8220;No single system will solve this problem,&#8221; Ozment said. &#8220;We do need a defense-in-depth strategy.&#8221;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Preventing all intrusions is impossible but OPM should have better protected the data at rest.<\/p>\n","protected":false},"author":7,"featured_media":46074,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":91,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":[]},"categories":[15,28,91],"tags":[],"coauthors":[2349],"class_list":["post-15479","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-management","category-smr","category-opm-data-breach"],"acf":{"subheadline":"","legacy_arc_id":"LWXMC35ZVVCLTCOVBTHSZJ5G5Q","arc_canonical_url":"\/smr\/opm-data-breach\/2015\/06\/19\/opm-breach-a-failure-on-encryption-detection\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.0 (Yoast SEO v28.1) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>OPM breach a failure on encryption, detection - Federal Times<\/title>\n<meta name=\"description\" content=\"Preventing all intrusions is impossible but OPM should have better protected the data at rest.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/one.sightlinemg.com\/federaltimes\/smr\/opm-data-breach\/2015\/06\/19\/opm-breach-a-failure-on-encryption-detection\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"OPM breach a failure on encryption, detection\" \/>\n<meta property=\"og:description\" content=\"Preventing all intrusions is impossible but OPM should have better protected the data at rest.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/one.sightlinemg.com\/federaltimes\/smr\/opm-data-breach\/2015\/06\/19\/opm-breach-a-failure-on-encryption-detection\/\" \/>\n<meta property=\"og:site_name\" content=\"Federal Times\" \/>\n<meta property=\"article:published_time\" content=\"2015-06-19T20:09:19+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-08T04:42:14+00:00\" \/>\n<meta name=\"author\" content=\"Aaron Boyd\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Aaron Boyd\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\n\t    \"@context\": \"https:\\\/\\\/schema.org\",\n\t    \"@graph\": [\n\t        {\n\t            \"@type\": \"Article\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/smr\\\/opm-data-breach\\\/2015\\\/06\\\/19\\\/opm-breach-a-failure-on-encryption-detection\\\/#article\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/smr\\\/opm-data-breach\\\/2015\\\/06\\\/19\\\/opm-breach-a-failure-on-encryption-detection\\\/\"\n\t            },\n\t            \"author\": {\n\t                \"name\": \"migration\",\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\"\n\t            },\n\t            \"headline\": \"OPM breach a failure on encryption, detection\",\n\t            \"datePublished\": \"2015-06-19T20:09:19+00:00\",\n\t            \"dateModified\": \"2026-08-08T04:42:14+00:00\",\n\t            \"mainEntityOfPage\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/smr\\\/opm-data-breach\\\/2015\\\/06\\\/19\\\/opm-breach-a-failure-on-encryption-detection\\\/\"\n\t            },\n\t            \"wordCount\": 753,\n\t            \"commentCount\": 0,\n\t            \"publisher\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#organization\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/smr\\\/opm-data-breach\\\/2015\\\/06\\\/19\\\/opm-breach-a-failure-on-encryption-detection\\\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/635703168824908127-was8936411jpg.jpg\",\n\t            \"articleSection\": [\n\t                \"Inside the Agencies\",\n\t                \"Special Multimedia Reports\",\n\t                \"The OPM data breach\"\n\t            ],\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"CommentAction\",\n\t                    \"name\": \"Comment\",\n\t                    \"target\": [\n\t                        \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/smr\\\/opm-data-breach\\\/2015\\\/06\\\/19\\\/opm-breach-a-failure-on-encryption-detection\\\/#respond\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebPage\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/smr\\\/opm-data-breach\\\/2015\\\/06\\\/19\\\/opm-breach-a-failure-on-encryption-detection\\\/\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/smr\\\/opm-data-breach\\\/2015\\\/06\\\/19\\\/opm-breach-a-failure-on-encryption-detection\\\/\",\n\t            \"name\": \"OPM breach a failure on encryption, detection - Federal Times\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#website\"\n\t            },\n\t            \"primaryImageOfPage\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/smr\\\/opm-data-breach\\\/2015\\\/06\\\/19\\\/opm-breach-a-failure-on-encryption-detection\\\/#primaryimage\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/smr\\\/opm-data-breach\\\/2015\\\/06\\\/19\\\/opm-breach-a-failure-on-encryption-detection\\\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/635703168824908127-was8936411jpg.jpg\",\n\t            \"datePublished\": \"2015-06-19T20:09:19+00:00\",\n\t            \"dateModified\": \"2026-08-08T04:42:14+00:00\",\n\t            \"description\": \"Preventing all intrusions is impossible but OPM should have better protected the data at rest.\",\n\t            \"breadcrumb\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/smr\\\/opm-data-breach\\\/2015\\\/06\\\/19\\\/opm-breach-a-failure-on-encryption-detection\\\/#breadcrumb\"\n\t            },\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"ReadAction\",\n\t                    \"target\": [\n\t                        \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/smr\\\/opm-data-breach\\\/2015\\\/06\\\/19\\\/opm-breach-a-failure-on-encryption-detection\\\/\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"ImageObject\",\n\t            \"inLanguage\": \"en-US\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/smr\\\/opm-data-breach\\\/2015\\\/06\\\/19\\\/opm-breach-a-failure-on-encryption-detection\\\/#primaryimage\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/635703168824908127-was8936411jpg.jpg\",\n\t            \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/635703168824908127-was8936411jpg.jpg\"\n\t        },\n\t        {\n\t            \"@type\": \"BreadcrumbList\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/smr\\\/opm-data-breach\\\/2015\\\/06\\\/19\\\/opm-breach-a-failure-on-encryption-detection\\\/#breadcrumb\",\n\t            \"itemListElement\": [\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 1,\n\t                    \"name\": \"Home\",\n\t                    \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/\",\n\t                    \"ad_zone\": \"home\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 2,\n\t                    \"name\": \"The OPM data breach\",\n\t                    \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/smr\\\/opm-data-breach\\\/\",\n\t                    \"ad_zone\": \"opm-data-breach\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 3,\n\t                    \"name\": \"OPM breach a failure on encryption, detection\"\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebSite\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#website\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/\",\n\t            \"name\": \"Federal Times\",\n\t            \"description\": \"Federal Times\",\n\t            \"publisher\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#organization\"\n\t            },\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"SearchAction\",\n\t                    \"target\": {\n\t                        \"@type\": \"EntryPoint\",\n\t                        \"urlTemplate\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/?s={search_term_string}\"\n\t                    },\n\t                    \"query-input\": {\n\t                        \"@type\": \"PropertyValueSpecification\",\n\t                        \"valueRequired\": true,\n\t                        \"valueName\": \"search_term_string\"\n\t                    }\n\t                }\n\t            ],\n\t            \"inLanguage\": \"en-US\"\n\t        },\n\t        {\n\t            \"@type\": \"Organization\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#organization\",\n\t            \"name\": \"Federal Times\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/\",\n\t            \"logo\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#\\\/schema\\\/logo\\\/image\\\/\",\n\t                \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/federal-logo-white.png\",\n\t                \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/federal-logo-white.png\",\n\t                \"caption\": \"Federal Times\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#\\\/schema\\\/logo\\\/image\\\/\"\n\t            }\n\t        },\n\t        {\n\t            \"@type\": \"Person\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\",\n\t            \"name\": \"migration\",\n\t            \"image\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec\",\n\t                \"url\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t                \"contentUrl\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t                \"caption\": \"migration\"\n\t            },\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/author\\\/migration\\\/\"\n\t        }\n\t    ]\n\t}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"OPM breach a failure on encryption, detection - Federal Times","description":"Preventing all intrusions is impossible but OPM should have better protected the data at rest.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/one.sightlinemg.com\/federaltimes\/smr\/opm-data-breach\/2015\/06\/19\/opm-breach-a-failure-on-encryption-detection\/","og_locale":"en_US","og_type":"article","og_title":"OPM breach a failure on encryption, detection","og_description":"Preventing all intrusions is impossible but OPM should have better protected the data at rest.","og_url":"https:\/\/one.sightlinemg.com\/federaltimes\/smr\/opm-data-breach\/2015\/06\/19\/opm-breach-a-failure-on-encryption-detection\/","og_site_name":"Federal Times","article_published_time":"2015-06-19T20:09:19+00:00","article_modified_time":"2026-08-08T04:42:14+00:00","author":"Aaron Boyd","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Aaron Boyd","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/smr\/opm-data-breach\/2015\/06\/19\/opm-breach-a-failure-on-encryption-detection\/#article","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/smr\/opm-data-breach\/2015\/06\/19\/opm-breach-a-failure-on-encryption-detection\/"},"author":{"name":"migration","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1"},"headline":"OPM breach a failure on encryption, detection","datePublished":"2015-06-19T20:09:19+00:00","dateModified":"2026-08-08T04:42:14+00:00","mainEntityOfPage":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/smr\/opm-data-breach\/2015\/06\/19\/opm-breach-a-failure-on-encryption-detection\/"},"wordCount":753,"commentCount":0,"publisher":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#organization"},"image":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/smr\/opm-data-breach\/2015\/06\/19\/opm-breach-a-failure-on-encryption-detection\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/635703168824908127-was8936411jpg.jpg","articleSection":["Inside the Agencies","Special Multimedia Reports","The OPM data breach"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/one.sightlinemg.com\/federaltimes\/smr\/opm-data-breach\/2015\/06\/19\/opm-breach-a-failure-on-encryption-detection\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/smr\/opm-data-breach\/2015\/06\/19\/opm-breach-a-failure-on-encryption-detection\/","url":"https:\/\/one.sightlinemg.com\/federaltimes\/smr\/opm-data-breach\/2015\/06\/19\/opm-breach-a-failure-on-encryption-detection\/","name":"OPM breach a failure on encryption, detection - Federal Times","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#website"},"primaryImageOfPage":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/smr\/opm-data-breach\/2015\/06\/19\/opm-breach-a-failure-on-encryption-detection\/#primaryimage"},"image":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/smr\/opm-data-breach\/2015\/06\/19\/opm-breach-a-failure-on-encryption-detection\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/635703168824908127-was8936411jpg.jpg","datePublished":"2015-06-19T20:09:19+00:00","dateModified":"2026-08-08T04:42:14+00:00","description":"Preventing all intrusions is impossible but OPM should have better protected the data at rest.","breadcrumb":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/smr\/opm-data-breach\/2015\/06\/19\/opm-breach-a-failure-on-encryption-detection\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/one.sightlinemg.com\/federaltimes\/smr\/opm-data-breach\/2015\/06\/19\/opm-breach-a-failure-on-encryption-detection\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/smr\/opm-data-breach\/2015\/06\/19\/opm-breach-a-failure-on-encryption-detection\/#primaryimage","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/635703168824908127-was8936411jpg.jpg","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/635703168824908127-was8936411jpg.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/smr\/opm-data-breach\/2015\/06\/19\/opm-breach-a-failure-on-encryption-detection\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/one.sightlinemg.com\/federaltimes\/","ad_zone":"home"},{"@type":"ListItem","position":2,"name":"The OPM data breach","item":"https:\/\/one.sightlinemg.com\/federaltimes\/smr\/opm-data-breach\/","ad_zone":"opm-data-breach"},{"@type":"ListItem","position":3,"name":"OPM breach a failure on encryption, detection"}]},{"@type":"WebSite","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#website","url":"https:\/\/one.sightlinemg.com\/federaltimes\/","name":"Federal Times","description":"Federal Times","publisher":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/one.sightlinemg.com\/federaltimes\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#organization","name":"Federal Times","url":"https:\/\/one.sightlinemg.com\/federaltimes\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#\/schema\/logo\/image\/","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/federal-logo-white.png","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/federal-logo-white.png","caption":"Federal Times"},"image":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1","name":"migration","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec","url":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","caption":"migration"},"url":"https:\/\/one.sightlinemg.com\/federaltimes\/author\/migration\/"}]}},"jetpack_featured_media_url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/635703168824908127-was8936411jpg.jpg","jetpack_sharing_enabled":true,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Federal Times","distributor_original_site_url":"https:\/\/one.sightlinemg.com\/federaltimes","push-errors":false,"_links":{"self":[{"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/posts\/15479","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/comments?post=15479"}],"version-history":[{"count":1,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/posts\/15479\/revisions"}],"predecessor-version":[{"id":15487,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/posts\/15479\/revisions\/15487"}],"wp:attachment":[{"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/media?parent=15479"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/categories?post=15479"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/tags?post=15479"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/coauthors?post=15479"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}