Sen. Mark Warner reacts to OPM data hack

U.S. Sen. Mark Warner (D-VA), a member of the Senate Select Committee on Intelligence, released the following statement after the administration announced that roughly 4 million current and former federal employees have had sensitive personal information exposed by a hack:

“Today’s reported breach is part of a troubling pattern by this agency in failing to secure the personal data of federal employees – the second major breach in a year. Cyberattacks present a critical threat to our national security and our economy.  We cannot afford to keep dragging our feet in addressing the escalating threats posed by hackers out to steal individuals’ personal information.”

The bipartisan Cybersecurity Information Sharing Act, which passed the Intelligence Committee in March, includes an amendment by Sen. Warner that would require the intelligence community to produce a comprehensive accounting of the threat from cyberattacks and cybercrime, how the United States can better share intelligence with partner nations, what new technologies could help, and the extent to which prompt reporting of data breaches can help combat this threat.

Last December, Sen. Warner successfully amended The Intelligence Authorization Act of 2015 last December directing the President to address problems related to cyber criminals known to be operating in Ukraine, which international law enforcement authorities have identified as a major center for hackers and cyberthieves.  The amendment encouraged the President to take steps to make America safer from cybercrimes emanating from Ukraine, including improved intelligence and law enforcement cooperation, improved extradition procedures to ensure that cybercriminals face justice after causing damage to American  consumers.

In addition, Sen. Warner chaired the first hearing in Congress in the aftermath of a breach of the retailer Target.  On the heels of that hearing, Sens. Warner and Mark Kirk (R-IL) called for the private sector to cooperate in creating Information Sharing and Analysis Centers (ISACs) to share information on data breaches, something the retail and financial services industries now have pursued on a voluntary basis. Additionally, Sens. Warner and Kirk introduced legislation in the last Congress to strengthen consumer protections for debit cardholders by capping liability for fraud at $50, the same amount as for credit cards.  Sen. Warner currently is working on legislation to require enhanced private sector data security measures and consumer breach notification.

Sen. Warner is currently preparing to introduce data breach legislation that would create a comprehensive, nationwide and uniform data breach standard requiring timely consumer notification for breaches of financial data and other sensitive information.