The personal information and sensitive data of nearly 46,000 US veterans have been exposed to a recent data breach. The US Department of Veterans Affairs (VA) Office of Management has confirmed this security incident.
This data breach involved an online application concerning the Financial Services Center (FSC). It was accessed by some unauthorized users to turn away payments to the community health care providers – for medical treatment of the veterans.
The investigation has further revealed that the threat actors have modified financial information. Social engineering was used to exploit authentication protocols for diverting payment options from the VA.