Washington Post/AP
China's army of hackers are attempting to build up databases worth of information on American citizens. Washington Post. They have been hacking into federal agencies and health care providers with a goal of gathering information. Some of this information is the typical espionage targets, like who has security clearances, but it is also believed that they are using the stolen information to determine who is vulnerable to recruitment. China has had success in hacking the Office of Personnel Management (OPM) along with the health care company Anthem. 4 million employees had their data stolen in the OPM hack and 10 million in the Anthem hack. China then sends the data they collect to Chinese companies that analyze the data for the government. Unlike many other hacks, the data that was stolen has not shown up on the black market, further confirming that the attack was to gather data. For it's part the Chinese government denied everything and called the accusations "irresponsible".
My Comment:
I got a letter from Anthem Blue Cross a couple of months ago saying that my data was among the data that was stolen. In a way this story is a relief because it means that there is a much smaller chance that my identity will be stolen. Of course, having that data in the possession of a foreign government is more then a little disconcerting. Fortunately, the Chinese government should have little to no interest with me because I have no connection to any government agencies or special knowledge that they would be interested in. To be sure, any Chinese communist trying to recruit me would be wasting their time an energy.
Still, it is not a comforting thought that a foreign government that isn't all that friendly with the United States has my name, phone number, address and Social Security number. I also occasionally post negative things about the Chinese government on this very blog... If they start to think that my blog is causing them problems they have a very effective weapon to use against me. It's scary enough when you get doxxed by random trolls. Getting doxxed by a hugely powerful government? I don't even what to think about it. My only solace is that my blog is too small and unimportant to really be noticed... I hope.
For all the government employees exposed by this hack, they must be rather concerned right now as well. It is very possible that the Chinese could use this information to either blackmail them or threaten them. This is a huge security threat to the United States. Not only do the Chinese have a ton of data to sift through to find espionage targets, they also have the means to hurt people that work in the government. Airing dirty laundry for the world to see was very effective when the North Koreans did it against Sony Pictures. The Chinese could do the same thing with the OPM data.
This is the kind of thing that the NSA is supposed to prevent. With such a huge focus on offensive capabilities they have neglected defense. In truth, the NSA has worked hard to ensure that there are backdoors in practically every security system so they can exploit them. Well, the Chinese, and everyone else for that matter, wants to exploit the same security holes.
The NSA really needs to step up their game and work with other government agencies and private companies to protect this information, and the information of millions of ordinary Americans like me. The NSA is supposed to protect us, but right now I don't feel very protected. Indeed, the NSA probably has all the same data on me as the Chinese government does.
One wonders what the political fallout is from the undeclared cyberwar that is happening between the United States and China. Both sides are targeting each other, but neither side will really admit what they are doing. It's especially odd since both China and the United States are huge economic partners, but at the same time they see each other as super power rivals. With the dispute in the South China Sea, it is possible that the cyber warfare could blow out of control if that particular tinderbox heats up. As bad as things are now, things might get much worse in the future.
Makes me want to throw the internet out until our government slackers can develop ways to protect our data. Good Luck with that right!!!!!!
ReplyDelete