DOGE worker's old creds found in malware data dumps
Briefly

Kyle Schutt, an employee at DOGE, has had his information found in multiple data breaches, indicating potential cybersecurity risks. Developer Micah Lee identified 51 records associated with Schutt on 'Have I Been Pwned,' linking back to incidents from 2013 to 2020. However, the presence of four infostealer logs suggests that Schutt's personal machines may have been compromised, prompting concerns that DOGE staff could be accessing sensitive government data from unsecured devices. Given Schutt's role at FEMA, the implications for cybersecurity practices are significant.
I have no way of knowing exactly when Schutt's computer was hacked, or how many times. Evidence of infostealers means I fervently hope DOGE staff are not using personal machines to access government records.
51 breach records on HIBP is a lot, but excusable because while Schutt's info was found in records associated with a 2013 Adobe breach, the 2016 LinkedIn breach, and Gravatar's 2020 breach, none of those incidents involved Schutt's personal machines.
Read at Theregister
[
|
]