Cybersecurity and Infrastructure Security Agency (CISA) security incident history
Hacking, data breaches and other security incidents involving Cybersecurity and Infrastructure Security Agency (CISA), with related coverage.
CISA passwords and cloud keys exposed
Impact: Exposure of passwords and cloud keys including Amazon Web Services GovCloud keys
Passwords and cloud keys belonging to the U.S. Cybersecurity and Infrastructure Security Agency were exposed on the public web via GitHub and other channels. The exposed material included Amazon Web Services GovCloud keys. The leaked material was taken down, and members of the U.S. Congress demanded explanations and answers from the agency.
Related reports: 10 · last report →CISA breach may have exposed chemical facility security data
Impact: Possible exposure of chemical facility security assessments, security plans and personal information
In January 2024, web shells were installed on Ivanti devices at the U.S. Cybersecurity and Infrastructure Security Agency, compromising the environment of CSAT, its chemical facility security assessment tool. It was suggested that sensitive information such as chemical facility security assessments and security plans, as well as personal information, may have been accessed. Authorities notified chemical facilities of the possible theft of information.
Related reports: 5 · last report →