The personal information of thousands of Marines, sailors, and civilians has been disclosed in a major data breach emanating from the US Marine Corps Forces Reserve.

 According to the Marine Corps Times, roughly 21,426 people are impacted by the data breach when an unencrypted email containing personally identifiable information (PII) was sent to the wrong email distribution list on Monday morning.

The compromised attachment contained highly sensitive information such as truncated social security numbers, bank details, truncated credit card information, mailing addresses, residential addresses and emergency contact information.

The email was sent within the official unclassified Marine domain, but also to some civilian accounts by the Defense Travel System (DTS).

Maj. Andrew Aranda, spokesman for Marine Forces Reserve said in a command release that “no malicious intent was involved” in this leak, but that they do plan to implement future changes to better safeguard personally identifiable information.

“The Marine Corps takes the protection of individual Marines’ private information and personal data very seriously, and we have steps in place to prevent the accidental or intentional release of such information,” Aranda said.

While it’s great news that the agency will soon be taking steps in the right direction to better secure PII, once sensitive data moves out of the Marine domain, there’s no telling how far it could spread. This confidential information could be used to commit bank or credit fraud, identity fraud, and help criminals engage in phishing schemes.

NNT suggests implementing high priority security controls like those outlined in the NIST 800-171 Special Publication to compliment your organizations existing IT strategy. This specific compliance standard is designed to provide guidance to anyone who handles Controlled Unclassified Information when the CUI is resident in non-federal information systems and organizations, but several of the controls are taken directly from the NIST SP 800-53 compliance standard, almost acting as a streamlined version of NIST 800-53. NIST 800-53 is a comprehensive guide to securing federal information systems.


Speak to a consultant to help you in your NIST 800-171 compliance program today!



The Most Powerful & Reliable Cybersecurity Products

change tracker gen7r2 logo

Change Tracker Gen 7R2: Complete configuration and system integrity assurance combined with the most comprehensive and intelligent change control solution available.

FAST Cloud logo

Fast Cloud: Leverage the world’s largest whitelist repository to automatically evaluate and verify the authenticity of file changes in real-time with NNT FAST™ (File Approved-Safe Technology)

vulnerability tracker logo

Vulnerability Tracker: The world’s only limitless and unrestricted vulnerability scanning solution with unparalleled accuracy and efficiency, protecting your IT assets on premises, in the cloud and mobile endpoints.

log tracker logo

Log Tracker: Comprehensive and easy to use security information & event log management with intelligent & self-learning correlation technology to highlight potentially harmful activity in seconds

Contact Us

Corporate Headquarters

6160 Warren Parkway, Suite 100
Frisco, Texas, 75034

Phone 1: 1-949-407-5125

Phone 2: 888-638-9749 (toll-free)

[email protected]

United Kingdom

5 New Street Square
London EC4A 3TW

Phone: +44 (0) 203 588 3023

 [email protected]
SC Magazine Cybersecurity 500 CSGEA Winners 2021 CIS benchmarking SEWP Now Certified IBM Security
Copyright 2024, New Net Technologies LLC. All rights reserved. 
NNT and Change Tracker are registered trademarks of New Net Technologies LLC.
All other product, company names and trademarks are the property of their respective owners.