22 Jan 2014

Bidders on US Dept of Homeland Security Contract Warned of Compromised Data

Companies who bid on a contract for the US Department of Homeland may have had their data compromised, according to security researcher Brian Krebs. The DHS is now notifying more than 100 companies in relation to the breach that took place over the past four months.

Some 114 companies involved in bidding for a DHS Science and Technology contract in 2013 are allegedly impacted, according to early estimates. Bank details of 16 companies were in the accessed documents and some 520 private documents are said to have been exposed.

“This letter is to inform you that your company’s bank account information may have been improperly accessed because of this incident,” reads the DHS notification letter to the affected organizations. “The incident appears to have occurred sometime over the prior four months.”

The DHS Portal is maintained by a Virginia-based REI Systems. It is not clear if other government projects were impacted during the breach.