House Homeland Security Committee staff are requesting a briefing from the Department of Homeland Security on the breach of the agency’s Homeland Security Information Network, according to a committee aide with knowledge of the matter.
Staffers are hoping to be briefed on the intrusion — first reported by Nextgov/FCW last week — by Friday, said the aide, who spoke on the condition of anonymity because the matter is sensitive.
Hackers are believed to have penetrated HSIN sometime between late May and early June, though their affiliation and whether any contents were pilfered from the platform is unclear, a person familiar with the matter previously said.
Approved users lean on the network to securely access data, exchange requests with partner agencies, manage operations, coordinate safety and security for planned events, respond to incidents and share mission-critical information needed to protect their communities, according to its website. HSIN carries unclassified but sensitive information shared among federal, state, local, territorial, tribal, international and private-sector partners.
The intrusion comes as the U.S. oversees security for World Cup games across the country, placing added scrutiny on the systems federal, state and local officials use to coordinate major events. A breach of the platform may raise concerns about whether hackers gained insight into security planning, interagency coordination or response procedures surrounding one of the most visible international events hosted predominately in the United States.
Senate Intelligence Committee Vice Chairman Mark Warner, D-Va., said last week that the network is being used to support the World Cup and America250 events. He added that it played a key role for emergency responders during last year’s mid-air collision between an American Airlines flight and an Army Black Hawk helicopter outside Washington, D.C.
“The information in HSIN, while not classified, is highly sensitive, and its exposure risks national security,” Warner said. “DHS and DOJ must thoroughly investigate who breached HSIN, what the attackers accessed, and ensure all DHS partners are provided with timely information and the tools necessary to mitigate any associated risks from the breach.”
When asked by Nextgov/FCW about the committee briefing request, a department spokesperson sent the same statement it provided last week that confirmed the hack.
The statement said staff “immediately took action to isolate the affected systems, mitigate the vulnerability, and launch a comprehensive forensic investigation,” and added that an investigation is ongoing and more details can’t be provided.
