Data attack targets Commerce Department

A Commerce Department bureau was the target of an attempt to gain access to employees' user accounts on its computer network, according to media reports.

The attack, which was discovered in July and came to public attention this week, specifically focused on the Department's Bureau of Industry and Security (BIS), which is responsible for such areas as export control and treaty compliance.

"The BIS discovered a targeted effort in July to gain access to user accounts, and we took immediate steps to ensure no information was comprised," Richard Mills, a spokesman for the Commerce Department, said Friday.

Although Mills declined to elaborate further, the Wall Street Journal reported that the BIS was replacing hundreds of workstations.

Meanwhile, one department official told CNET News.com that the BIS was cleaning up its computer system and receiving new hardware. The official noted that Internet access has been restricted to standalone workstations that are not connected to the bureau's other internal systems.

Commerce Department officials believe the malicious attack originated in China, a region frequently cited as a source, along with Eastern Europe, for spawning Trojans, phishing attacks and other security threats. The official noted that the attack was traced back to an Internet service provider based in China.

[reybar]

Little secrets?

Months late revealing the invasion .... they are making major,
expensive changes as a result of the invasion ... and we're to
believe the invasion was UNsuccesful?

Um, right!

[mveronica]

let's be optomistic....

Well who knows? It seems like after the HP scandal, we're seeing a shift towards security rather than away from it, so maybe this "unsuccessful" attack was a wake up call for the commerce deparment.

It mentioned in the article that they're replacing a lot of their old hardware. Let's just hope that they're properly disposing of their old hardware because I'm sure there's a lot of sensitive information stored on their old harddrives.
http://ezinearticles.com/?Recycling-Hardware:-Good-Intentions-Turn-Risky&id=312080

It would be unfortunate if they overlooked one security issue in a rush to patch up another....