U.S. Marshals Service reveal data theft following a ransomware attack

On Monday 27^th of February 2023, the U.S. Marshals Service (USMS), a bureau within the U.S. Justice Department, revealed that they experienced a ransomware attack and had discovered data exfiltration of a stand-alone system on Friday, 17^th of February 2023.

The USMS has stated they are investigating the theft of sensitive law enforcement information following the ransomware attack and that the stolen data included employees’ personally identifiable information.

“The affected system contains law enforcement sensitive information, including returns from legal process, administrative information, and personally identifiable information pertaining to subjects of USMS investigations, third parties, and certain USMS employees,” – USMS Spokesperson Drew Wade.

The USMS has confirmed that the compromised system is now disconnected from the USMS network, and it is believed that the threat actors did not gain access to USMS’ Witness Security Files Information System database.