CISA breach may have exposed chemical facility security data
In January 2024, web shells were installed on Ivanti devices at the US Cybersecurity and Infrastructure Security Agency, compromising the environment of CSAT, its chemical facility security assessment tool. It was suggested that sensitive information such as chemical facility security assessments and security plans, as well as personal information, may have been accessed. Authorities notified chemical facilities of the possible theft of information.
Key facts
- Affected organisation
- Cybersecurity and Infrastructure Security Agency (CISA)
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Possible exposure of chemical facility security assessments, security plans and personal information
- Cause / method
- Exploitation of Ivanti device vulnerabilities and installation of web shells
- Location
- United States
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- The hacking of the US Cybersecurity and Infrastructure Security Agency came to light.
- The breach was reported to be linked to the exploitation of Ivanti vulnerabilities.
- It was reported that personal information and chemical facility information may have been accessed.
- Authorities notified chemical facilities of the possible theft of sensitive information due to the CSAT breach.
5 related reports
- US Cybersecurity and Infrastructure Security Agency hacked
- Risk & Repeat: CISA hacked via Ivanti vulnerabilities
- Personal and Chemical Facility Information Potentially Accessed in CISA Hack
- CISA's Chemical Security Assessment Tool hit by cyberattack, sensitive documents potentially exposed
- Chemical facilities warned of possible data theft in CISA CSAT breach
Other incidents at Cybersecurity and Infrastructure Security Agency (CISA)
CISA passwords and cloud keys exposed
Impact: Exposure of passwords and cloud keys including Amazon Web Services GovCloud keys
Passwords and cloud keys belonging to the US Cybersecurity and Infrastructure Security Agency were exposed on the public web via GitHub and other channels. The exposed material included Amazon Web Services GovCloud keys. The leaked material was taken down, and members of the US Congress demanded explanations and answers from the agency.
Related reports: 10 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.