Original Release Date: 9/17/2020
The US Department of Veterans Affairs (VA) disclosed a data breach affecting approximately 46,000 veterans. The breach appears to be the result of a successful social engineering attempt in which an unauthorized third-party exploited authentication protocols and accessed a Financial Services Center (FSC) application. VA payments intended for healthcare providers who had treated veterans were diverted. Breached data may include veteran’s records and other various forms of personally identifiable information (PII). The application has been disabled pending further investigation. Veterans affected by this breach will be notified via mail and are advised to utilize the credit monitoring services provided at no cost.