OPM: background records became a concentrated exposure

What was reported

GAO reported that OPM’s 2015 breaches affected 21.5 million people’s personal information. Its 2017 review examined remediation, security controls and oversight of contractor-operated systems. GAO found that some corrective actions needed further work and that contractor security assessments did not comprehensively test controls.

Read the report from U.S. Government Accountability Office

Our perspective

Our reading: Concentrating detailed histories creates a consequential access boundary. For AI use, the useful question is what narrow answer can serve the task without transferring the whole underlying history.

Limits of this connection

The review describes conditions assessed in 2017, not OPM’s current security posture. It does not demonstrate that Vivendur would have prevented the historical breaches.