Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data

In a concerning string of events, two federal agencies have been hacked in the span of a month, resulting in the leak of sensitive data. The first breach occurred at the United States Postal Service's Office of the Inspector General (USPS-OIG), where hackers gained access to employee login credentials. This allowed the attackers to gain access to the OIG's email system, leading to the intrusion. The second breach occurred at the U.S. Treasury Department, where hackers exploited a vulnerability in a third-party software used by the department to gain access to the Treasury's email system and the Office of Foreign Assets Control (OFAC). The OFAC is responsible for enforcing economic and trade sanctions, and the data breach may have compromised sensitive information related to these sanctions. The Treasury Department has acknowledged the breach but has not provided further details. The two incidents highlight the ongoing challenges faced by federal agencies in protecting themselves against cyber threats.