open lock (Alexander Softog/Shutterstock.com)

Lawmakers seek 'complete accounting' of SBA data leak

Lawmakers want more information on exposure of personally identifiable information from thousands of companies applying to the Small Business Administration pandemic-relief loans.

In a letter to SBA Administrator Jovita Carranza on April 23,  Sens. Ben Cardin (D-Md.) and Marco Rubio (R-Fla.) and Rep. Nydia Velazquez (D-N.Y.)  said they are seeking "a complete accounting" about an incident in which personal data, including income and Social Security numbers of thousands Economic Injury Disaster Loans applicants, was exposed.

SBA confirmed press reports that EIDL applicants may have had some of their data exposed to other applicants. An administration official told CNBC that "we immediately disabled the impacted portion of the website, addressed the issue, and relaunched the application portal."

A twitter user posted a copy of the SBA letter on April 17, which said the "inadvertent disclosure" of PII was discovered on March 25.

SBA tech officials had a short time to build applications to handle the anticipated crush of applicants for a number of financial relief programs, including EIDL and the website to help small business apply for Paycheck Protection funding -- forgivable loans that incentivize businesses to retain employees during the current crisis.

Although SBA said there is yet not evidence that the exposed information is being misused, it is offering identity theft protection services to those affected by the breach.

A longer version of this article was first posted to FCW, a sibling site to GCN.

About the Authors

Mark Rockwell is a senior staff writer at FCW, whose beat focuses on acquisition, the Department of Homeland Security and the Department of Energy.

Before joining FCW, Rockwell was Washington correspondent for Government Security News, where he covered all aspects of homeland security from IT to detection dogs and border security. Over the last 25 years in Washington as a reporter, editor and correspondent, he has covered an increasingly wide array of high-tech issues for publications like Communications Week, Internet Week, Fiber Optics News, tele.com magazine and Wireless Week.

Rockwell received a Jesse H. Neal Award for his work covering telecommunications issues, and is a graduate of James Madison University.

Click here for previous articles by Rockwell. Contact him at [email protected] or follow him on Twitter at @MRockwell4.


Derek B. Johnson is a former senior staff writer at FCW.

Featured

  • Russia prying into state, local networks

    A Russian state-sponsored advanced persistent threat actor targeting state, local, territorial and tribal government networks exfiltrated data from at least two victims.

  • Marines on patrol (US Marines)

    Using AVs to tell friend from foe

    The Defense Advanced Research Projects Agency is looking for ways autonomous vehicles can make it easier for commanders to detect and track threats among civilians in complex urban environments without escalating tensions.

Stay Connected