Topics
4 signals
Richmond Public Schools says personal information of current and former students, employees, and contractors was posted on the dark web after a cyberattack. The district is restoring systems, conducting a forensic audit with federal officials, resetting passwords, and expanding identity monitoring; no procurement opportunity or contract timeline has been announced.
A reported breach exposed searchable records on more than 41,000 current and former DHS employees and contractors, including personnel at CBP, ICE, and CISA. DHS says it is addressing a potential breach; the reports identify no related solicitation, award, or contract action, but raise operational cybersecurity and workforce-protection concerns for contractors supporting the department.
A cyber-extortion group claims it stole roughly 590 gigabytes from a vendor hosting PwC employee learning records. The incident underscores third-party cyber risk, a core component of federal supply chain security requirements and vendor risk assessments.
Connor Moucka, a Canadian hacker, pled guilty to a 2024 cyberattack on Snowflake Inc., impacting over 165 customers. The breach resulted in $9.5 million in losses and critical lessons for procurement teams regarding cloud service security.