GSA Took 800 Days to Notify Some Data Breach Victims

NextGov: It took the General Services Administration more than 800 days to notify a handful of people that it had accidentally exposed their personal information, according to an audit released Friday.

In another case, the agency took six months just to determine that a data breach related to background investigation information had occurred, the agency’s inspector general said. The people affected by that breach might not have learned about it for two months more, according to the report.

Read article