Ivanti-linked breach impacted over 100,000 people, says CISA

TLDR

• A breach of CISA’s Chemical Security Assessment Tool potentially affected over 100,000 individuals.
• The breach was linked to flawed Ivanti products, leading to the notification of Congress.

A breach of the Cybersecurity and Infrastructure Security Agency (CISA) potentially affecting more than 100,000 individuals was linked to flawed Ivanti products, triggering the agency to notify Congress. The breach targeted the Chemical Security Assessment Tool (CSAT) and the CISA Gateway system, prompting CISA to take both systems offline for investigation. Although no evidence of data exfiltration was found, CISA is still working to notify affected individuals and companies. The breach was discovered in January after the details of an Ivanti vulnerability were made public. While the compromise of CSAT was significant, the breach of the CISA Gateway system was more limited. The breach forced CISA to make disclosures to Congress, as mandated by federal cybersecurity law, and led to internal investigations to identify the methods used by the attackers. CISA has taken corrective actions, including improving security measures and keeping CSAT offline until the systems are fully secured. The breach has highlighted the importance of incident response plans and information sharing for improving cybersecurity posture within the agency.