Archive · 30 Sep 2025
FEMA Network Breached: Hacker Steals Employee Data
Imagine someone broke into a computer system that FEMA uses.
They got in using stolen login information for software called Citrix.
Over a few months, they looked around and stole information about FEMA and Customs and Border Protection employees.
FEMA realized something was wrong and stopped using the software.
Afterwards, a lot of FEMA employees were fired.
The government is checking what happened.
A hacker accessed FEMA networks using compromised credentials.
The breach occurred through Citrix remote desktop software.
Data of FEMA and Customs and Border Protection employees was stolen.
The hacker was active in the network from June 22 to August 5.
Two dozen FEMA employees were fired following the incident.
- Who
- A hacker
- What
- Breached FEMA's network and stole employee data.
- When
- June 22 - August 5 (breach active)
- Where
- FEMA Region 6 networks
- Why
- Unknown
- Agency Affected
- FEMA
- Date Range of Breach
- June 22 - August 5
- Data Stolen
- Employee data (FEMA & CBP)
- Breach Method
- Compromised credentials via Citrix software
- Region Affected
- FEMA Region 6
- Action Taken
- Two dozen FEMA employees fired