Lawmakers propose giving 2015 OPM breach victims identity protection for life
Legislators are proposing permanent identity protection services for the roughly 22 million people whose personal data was stolen in the 2015 Office of Personnel Management breaches, linked to Chinese state-backed hackers. Current federal coverage for those victims is set to expire on September 30.
Why this matters: The OPM breach was not a typical hack. The stolen records included security clearance applications, fingerprints, mental health history, financial data, and personal information on family members and references. That kind of data does not expire. Someone holding it can cause harm years or decades later. Cutting off protection on an arbitrary deadline treats a permanent exposure like a temporary inconvenience. These were federal employees and contractors who handed over sensitive details because the government required it. Covering them for life is the least it can do.
Who should care: Cybersecurity · Privacy officers · Administrators
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.