February 27 2026

OPM’s Breach: A Case Study of What Not To Do With IT Security

OPM’s Breach: A Case Study of What Not To Do With IT Security

The hack of the federal government's Office of Personnel Management exposed a "lack of professionalism and knowledge" that is about 20 years behind the security curve. There was no IT security staff until 2013, IT was operated by contractors whose contracts were expired, and there was not even a comprehensive inventory of the network. Apparently, "the hackers knew this network better than the people that operated it." [6/10/15]