Good call. Those are the most devastating by far because the first is effectively a bad mail database while the second destroys most forms of identity proofing

Good call. Those are the most devastating by far because the first is effectively a bad mail database while the second destroys most forms of identity proofing for all time. Though it's unfair calling the OPM incident a "breach" as management of the database was outsourced to an outsourcer to an outsourcer so the final party had full read/write access over it for potentially years. As I noted at the time, every clearance granted or denied during that period must be reviewed.[0] 0 - http://caseysoftware.com/blog/opm-background-check-hack-a-different-angle http://caseysoftware.com/blog/opm-background-check-hack-a-di... (I had a clearance previously so I was included in this one.)