Per Wiki
Office of Personnel Management data breach
In June 2015, the United States Office of Personnel Management (OPM) announced that it had been the target of a data breach targeting the records of as many as four million people.[1] The final estimate of the number of stolen records is approximately 21.5 million. This includes records of people who had undergone background checks, but who were not necessarily current or former government employees.[2] It has been described by federal officials as among the largest breaches of government data in the history of the United States.[1] Information targeted in the breach included personally identifiable information such as Social Security numbers,[3] as well as names, dates and places of birth, and addresses.[4]
The data breach consisted of two separate, but linked, attacks.[5] It is unclear when the first attack occurred but the second attack happened on May 7, 2014 when attackers posed as an employee of KeyPoint Government Solutions, a subcontracting company. The first attack was discovered March 20, 2014, but the second attack was not discovered until April 15, 2015.[5]
In the aftermath of the event, Katherine Archuleta, the director of OPM, and the CIO, Donna Seymour, resigned.[6]
On August 27, 2017, the FBI arrested a Chinese national suspected of helping to create the malware used in the breach.[7]
Theft of fingerprints
The stolen data included 5.6 million sets of fingerprints.[20] Biometrics expert Ramesh Kesanupalli said that because of this, secret agents were no longer safe, as they could be identified by their fingerprints, even if their names had been changed.[21