EEOC experienced security incident involving an Opexus employee's 'unauthorized' access, email says - DataBreaches.Net

"The Equal Employment Opportunity Commission was impacted in an internal data security incident that occurred around a year ago, and involved a contractor's employees mishandling sensitive information in one of the agency's systems, according to a notification email obtained by Nextgov/FCW."

"The breach in the EEOC's Public Portal system, which the agency was made aware of around Dec. 18, involved unauthorized access of agency data that may have exposed personally identifiable information of its employees."

"Staff employed by the contractor, who had privileged access to EEOC systems, were able to handle data in an unauthorized (UA) and prohibited manner in early 2025, it reads. Upon discovery, the EEOC took immediate steps to secure its systems and initiated an assessment to determine the nature and scope of the incident."

The Equal Employment Opportunity Commission experienced an internal data security incident about a year ago that involved contractor employees mishandling sensitive information within an agency system. The incident affected the EEOC's Public Portal system. The agency became aware of the issue around Dec. 18. Unauthorized access to agency data may have exposed personally identifiable information of EEOC employees. Staff employed by the contractor had privileged access and handled data in an unauthorized and prohibited manner in early 2025. Upon discovery, the EEOC took immediate steps to secure systems and initiated an assessment to determine the nature and scope of the incident. The incident was disclosed via a notification from the EEOC's data security office.

Read at DataBreaches.Net