Ransomware attackers steal personal info of over 600K Medicare beneficiaries


  • Employees at the Office of Personnel Management will soon see changes to their in-office requirements. All eligible employees with telework agreements at OPM are expected to report to the office at least two days per week, starting this fall. The change will take place in a phased approach, beginning in September, and will be fully implemented by October. OPM is the latest in a long series of agencies to announce new in-the-office requirements, after the Office of Management and Budget told agencies to start ramping up in-person work after the COVID-19 pandemic.
  • The Centers for Medicare and Medicaid Services (CMS) is responding to a major data breach at one of its contractors. CMS confirmed Maximus Federal Services was one of many organizations swept up by a ransomware attack on the MoveIT file transfer software in late May. CMS said the hackers were able to steal personal information on more than 600,000 Medicare beneficiaries. None of CMS’s internal systems was impacted by the attack. The agency and Maximus are sending letters to affected individuals.
  • Two lawmakers want to change how the federal employment process views marijuana. A new bipartisan bill in the House would prohibit agencies from denying someone a job or security clearance over current or past marijuana use. The bill was introduced by Rep. Jamie Raskin (D-Md.) and Rep. Nancy Mace (R-S.C.) last week. It would also require agencies to establish a process for reviewing any decision dating back to 2008 that denied someone a federal job or clearance due to marijuana use. The legislation is the latest effort to loosen restrictions around federal employment and pot. Current policies still prohibit feds from using weed whether they are on or off the clock.
  • The FDIC has outlined its plan to better manage its cloud services. The Federal Deposit Insurance Corporation will close three holes in how it manages its cloud computing services over the next year. The FDIC CIO told the agency’s inspector general that it will establish an enterprisewide catalog of data by February. It…

Source…