Lockheed keeps mum on reported data breach
Company grappling with massive internal network problems; RSA SecurID tokens involved, Reuters report says
Computerworld - The nation's No. 1 defense contractor, Lockheed Martin, today would neither confirm nor deny a Reuters story saying the company had experienced a major data breach.
A Lockheed spokesman, Jeffrey Adams, said today in a brief statement via email that the company did not, as a matter of policy, discuss specific threats or responses. "We have policies and procedures in place to mitigate the cyber threats to our business, and we remain confident in the integrity of our robust, multi-layered information systems security," the statement noted.
Earlier, a Reuters story quoting unnamed sources within Lockheed had reported that the defense contractor was grappling with a major internal computer network problem that had affected a "lot of people."
The incident has forced Lockheed to reset passwords for employees and take other unspecified measures. Lockheed has notified the Pentagon about the problem, the report said.
Reuters quoted technology blogger Robert Cringley as saying the intrusion may have involved the use of RSA's SecurID tokens, which Lockheed Martin employees use when logging into their network from outside the company.
RSA, part of EMC, had earlier this year disclosed that intruders had broken into its networks and potentially compromised data involving its SecurID authentication technology.
The Reuters story does not say when exactly the alleged intrusion may have occurred. But it does note that Lockheed employees have been experiencing a network slowdown since last Sunday.
Targeted attacks keep coming
Lockheed, which manufactures the F-22 and F-35 fighter planes and other weapons systems, is only one in a growing list of high-profile organizations that have been hit this year by highly targeted attacks.
In April, Oak Ridge National Laboratory, home to one of the fastest supercomputers in the world, was forced to shut down its email systems and Internet access for several days following a breach.
The measures were implemented after officials discovered attempts by someone to steal technical data from the lab's systems and send it to an external system.
More recently, Sony's PlayStation Network and Sony Online Entertainment networks were forced offline for several days after intruders broke into them and compromised data belonging to as many as 100 million account holders.
In Sony's case, the motive for the attack appears to be tied to the company's hard-line stance on copyright enforcement and IP protection. But in several of the other cases, the motives for the attack appear to be espionage and data theft.
Jaikumar Vijayan covers data security and privacy issues, financial services security and e-voting for Computerworld. Follow Jaikumar on Twitter at @jaivijayan or subscribe to Jaikumar's RSS feed . His e-mail address is email@example.com.
- Goodwill Industries probes possible payment card breach
- Aloha point-of-sale terminal, sold on eBay, yields security surprises
- The biggest data breaches of 2014 (so far)
- Blue Shield discloses 18,000 doctors' Social Security numbers
- PF Chang's says breach was 'highly sophisticated criminal operation'
- Breaches exposed 1 in 7 US debit cards in 2013
- New malware program targets banking data
- How to protect yourself against privileged user abuse
- Montana data breach exposes 1.3 million personal records
- Hacker puts 'full redundancy' code-hosting firm out of business
Read more about Data Security in Computerworld's Data Security Topic Center.
- Mobile First: Securing Information Sprawl Learn how the partnership between Box and MobileIron can help you execute a "mobile first" strategy that manages and secures both mobile apps...
- Cybersecurity Imperatives: Reinvent your Network Security The Rise of CyberSecurity
- Surescripts Case Study- Securing Keys and Certificates Surescripts implemented Venafi's Trust Protection Platform™ to secure digital keys and certificates, ensure the privacy and confidentiality of electronic clinical information for its...
- Ponemon 2014 SSH Security Vulnerability Report According to research by the Ponemon Institute, 3 out of 4 enterprises have no security controls in place for SSH which leaves organizations...
- Responding to New SSL Cybersecurity Threat The featured Gartner research examines current strategies to address new SSL cybersecurity threats and vulnerabilities.
- Deep Dive into Advanced Networking and Security with Hybrid Cloud Security and networking are among the top concerns when moving workloads to the cloud. VMware vCloud® Hybrid Service™ enables you to extend your... All Security White Papers | Webcasts
Our new bimonthly Internet of Things newsletter helps you keep pace with the rapidly evolving technologies, trends and developments related to the IoT. Subscribe now and stay up to date!