Hackers have managed to gain access to and steal documents from Leidos, a company that provides IT services to several US government agencies, including the Pentagon.
a Bloomberg The company said the stolen documents were obtained as part of a breach of a Diligent Corp. system that the company used to host information in internal investigations, Leidos said in a report on the breach.
It added that the breach followed an earlier issue in 2023 affecting a third-party vendor, with a company spokesperson saying: “We have confirmed that this stems from a previous incident affecting a third-party vendor for which all necessary notifications were made in 2023. This incident did not impact our network or any sensitive customer data.”
Another third-party supply chain issue
Leidos Holdings said the breach stemmed from an earlier issue in 2023 that affected a third-party vendor, with a company spokesperson saying: “We have confirmed this stems from a previous incident affecting a third-party vendor for which all necessary notifications were made in 2023. This incident did not impact our network or any sensitive customer data.”
A spokesperson for Diligent Corp. also responded to the breach, saying it was related to an incident that occurred in 2022 that affected Diligent subsidiary Steele Compliance Solutions. The spokesperson said that “we promptly notified impacted customers, including Leidos, which first notified Diligent in November 2022, and took immediate corrective actions to contain the incident.”
Bloomberg News could not verify the authenticity of the documents leaked online and said that details about the stolen documents had been redacted. Other Leidos clients include NASA and the U.S. Department of Defense, along with a range of U.S. and foreign agencies.
The Pentagon has recently been hit by security concerns after several high-ranking government officials Microsoft emails leaked by Chinese cybercriminalwith some 20,000 people affected by the breach.