Leidos serves prominent clients including the US Department of Defense (DOD), the Department of Homeland Security (DHS), NASA, and various other US and foreign agencies, as well as commercial businesses. The leak has raised significant concerns given the sensitive nature of the information involved.
The report reviewed some of the leaked files posted on a cybercrime forum but could not verify their authenticity as details were redacted.
A spokesperson from Diligent stated that the leak appears to stem from a 2022 hack affecting its subsidiary Steele Compliance Solutions, acquired in 2021. The spokesperson noted that fewer than 15 customers, including Leidos, were using the compromised product at the time. “We promptly notified impacted customers, including Leidos, in November 2022, and took immediate corrective action to contain the incident,” the report said quoting the spokesperson.
