The Federal Bureau of Investigation (FBI) has classified a recent cyber intrusion, believed to be carried out by Chinese hackers, as a “major incident” under the Federal Information Security Modernization Act (FISMA). FISMA guidelines classify a “major incident” as an intrusion that compromises personal data and presents risks to the national security, foreign relations, public confidence, or civil liberties of Americans.
The FBI first alerted Congress to suspicious activity on March 4, reporting that the affected system contained law enforcement-sensitive material. Although officials did not initially identify the source of the intrusion, investigators now suspect the operation was linked to China.
Under FISMA, federal agencies must notify lawmakers within seven days of discovering a cyberattack likely to cause significant harm to U.S. national security. FISMA-designated “major incidents” are uncommon and only happen a few times per year.