Last updated
General Services Administration: Cybersecurity Incident
A US federal OIG audit found GSA repeatedly left controlled unclassified information exposed in its Google Drive, including building site plans, security layouts, and employee PII, with 116 files found improperly shared with all GSA users in a limited search and a DLP tool that is misconfigured and incompletely managed.
Source: The Register
- Who
- General Services Administration · USA
- What happened
- A US federal OIG audit found GSA repeatedly left controlled unclassified information exposed in its Google Drive, including building site plans, security layouts, and employee PII, with 116 files found improperly shared with all GSA users in a limited search and a DLP tool that is misconfigured and incompletely managed.
- When
- 2026-10-29
- Source
- The Register
- So what
- A breach is a governance event before it is a technical one.
The leadership read
A breach is a governance event before it is a technical one. For General Services Administration in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across Americas, watch whether the response is a hire or a contractor; that distinction says how the board has read it.
Market context: The wider read — a Talent Market Index of 104.6 (Hot), up 3.6 month-on-month — shows Americas signal flow steady (-0.7pts).
General Services Administration: 2 signals in the last 90 days; 2 tracked across 6 days.
MitchelLake in this thematic
Also at General Services Administration →
More signals across Americas
Cybersecurity Incident · Americas
Mavis Tire Supply LLC →Mavis Tire Supply LLC is the subject of a reported data breach in which customer and other stakeholder personal information may have been exposed. A plaintiff-side law firm is soliciting affected individuals for class action claims.
Cybersecurity Incident · Americas
DigiCert →DigiCert disclosed a data breach after a server migration mistakenly exposed an internal business system to the internet, allowing unauthorized access to customer information and identity documents.
Cybersecurity Incident · Americas
Harvard University →Hackers breached Harvard University's Alumni Affairs and Development systems in November 2025, stealing data linked to more than 850,000 unique email addresses, per Have I Been Pwned.
Cybersecurity Incident · Americas
Turning Stone Enterprises →Turning Stone Enterprises, the commercial arm of the Oneida Nation, shut down internal systems after a cybersecurity incident. Its casinos (Turning Stone Resort Casino, Point Place Casino, YBR Casino & Sports Book), Lake House, Maple Leaf Markets and SavOn stores were forced to cash-only operations, with ATMs, sports betting, bingo and the TS Rewards loyalty program disrupted.
Cybersecurity Incident · Americas
mSeven Software →mSeven Software, developer of the mSecure password manager, disclosed suspicious activity affecting its application and urged customers to change passwords, reset two-factor authentication, and remove passkeys. The company has not disclosed what happened, when, or whether customer data was accessed, and has engaged external cybersecurity experts.
Cybersecurity Incident · Americas
ILC Dover →ILC Dover (and affiliate ILC Astrospace), a spacesuit manufacturer, agreed to pay a record $13 million to settle a False Claims Act case over cybersecurity failures on government contracts, brought by a whistleblower.
Where this lands in our work
- Executive Search →
A breach puts the security, technology and risk seats under review; those searches run through our executive search practice.
- Executive Search: Americas →
Our Americas practice runs the searches behind signals like this one.
Intelligence powered by Autonodal ↗