HHS Cybersecurity Incident Reports

Caveats:
From 1 January 2013 until 30 June 2015, the Department of Health and Human Services categorized
incidents using Categories, as defined in the NIST Special Publication 800-61, rev.1. A list of the possib
categories can be found on the References tab of this spreadsheet.
Beginning 1 July 2015, HHS converted from the legacy Category system to the Impact Classification
system (defined in NIST SP800-61, rev.2 and expanded at https://www.us-cert.gov/incident-notification
guidelines). Impact Classifications consist of a four-factor matrix that provides a more descriptive pictu
of the impact of an incident on the Department.
Incidents that were created during the transition phase from Categories to Impact Classifications were
dual-coded. These incidents are reported herein using only the official reporting mechanism, to preven
duplicate or extraneous reporting.
The Quantity provided represents the number of documented incidents that match the defining tuple
preceding the value on that row. It should be assumed that if a possible tuple is not present, the value
that month is zero.
The earliest month available with complete data is January 2013, due to document retention policies.
Document retention for incident data is based on General Records Schedule 24, item 7
(http://www.archives.gov/records-mgmt/grs/grs24.html). This item states that computer security incide
handling records are to be "(d)estroyed/deleted 3 years after all necessary follow-up actions have bee
completed." See the Implementation Aid at the bottom of the website page for additional clarification
HHS Operational Divisions

OPDIV
Full Name
ACF
Administration for Children and Families
AoA
Administration on Aging
CDC
Centers for Disease Control and Prevention
CMS
Centers for Medicare and Medicaid Services
CSIRC
Computer Security Incident Response Center
FDA
Food and Drug Administration
IHS
Indian Health Services
ITIO
Office of the Secretary
NIH
National Institutes of Health
OIG
Office of Inspector General
OS
Office of the Secretary
PSC
Program Support Center
TIC
Trusted Internet Connection
Incident Categories
Categories
Functional Impact
Category 00 - Network Testing
High
Category 01 - Unauthorized Access
Medium
Category 02 - Denial of Service
Low
Category 03 - Malicious Code
None
Category 04 - Inappropriate Usage

Category 05 - Scans, Probes and Attempted
Access
Category 06 - Investigation
Information Impact
Category 99 - Non-Incident
Proprietary
Classified
Privacy
Integrity
None
Recoverability
Not Recoverable
Extended
Supplemented
Regular
Not Applicable
Threat Vector
Unknown
Attrition
Web
Email
External/Removable Media
Impersonation/ Spoofing
Improper Usage
Loss/Theft of Equipment
Other
Impact Classifications
Description
Organization has lost the ability to provide all critical services to all system users.
Organization has lost the ability to provide a critical service to a subset of system users.
Organization has experienced a loss of efficiency, but can still provide all critical services to all users with minimal eff
Organization has experienced no loss in ability to provide all services to all users.
Description
The confidentiality of classified information was compromised.
The confidentiality of unclassified proprietary information, such as Protected Critical Infrastructure Information (PCII)
The confidentiality of PII or PHI was compromised.
The necessary integrity of information was modified without authorization.
No information was exfiltrated, modified, deleted, or otherwise compromised.
Description
Recovery from the incident is not possible (e.g., data exfiltrated and posted publicly)
Time to recovery is unpredictable; additional resources and outside help needed
Time to recovery is predictable with additional resources
Time to recovery is predictable with existing resources
Incident does not require recovery
Description
Cause of attack is unidentified
Brute force methods to compromise or degrade systems/services
Attack executed from a website or web-based application
Attack executed via an email message or attachment
Attack executed from removable media or a peripheral device
Attack involving replacement of legitimate content/services with a malicious substitute
Incident involving a violation of acceptable use policies by a legitimate user
Loss or theft of the organization's computing device(s) or media
An attack that does not fit into any other vector
OPDIV
Category
Quantity
CDC
CDC
CDC
31
CDC
Category 05 - Scans, Probes and

Attempted Access
13
CDC
58
CMS
CMS
CMS
73
CMS
CMS
Category 02 - Denial of Service
FDA
FDA

Attempted Access
26
3
HRSA

Attempted Access
HRSA
HRSA
IHS
IHS
15
IHS
ITIO
NIH

Attempted Access
61
NIH
58
NIH
33
NIH
48
OIG
OS
OS
OS
OS
OPDIV
Category
Quantity
CDC
CDC
Category 05 - Scans, Probes

and Attempted Access
19
CDC
Category 01 - Unauthorized
Access
21
CDC
CDC
CMS
CMS
Category 04 - Inappropriate
Usage
22
CMS
68
CMS
Access
315
CMS

CMS
11
71
CSIRC

FDA

FDA
FDA
Access
14
FDA
HRSA

HRSA
Access
IHS

IHS
IHS
Access
Usage
11
6
IHS
16
NIH
110
NIH
NIH
NIH
NIH
OIG
OIG
Usage
Access
Usage
Access
2
37
46
62
2
4
OS
OS
Usage
OS
OS
PSC
SAMHSA

Access
Access
1
1
1
OPDIV
Category
Quantity
CDC

32
CDC
Access
39
CDC
11
CDC
Category 03 - Malicious
Code
88
CMS
Access
CMS
CMS
Code
CMS
58
CMS
Usage
10
FDA
Access
FDA

262
FDA
FDA
Code
Usage
2
1
HRSA
Access
IHS
IHS
Access
IHS
IHS
ITIO
Code
Usage
Code
49
14
3
ITIO
NIH

91
NIH
Code
70
NIH
NIH
Usage
62
NIH
Access
44
OIG
Usage
OS
OS
Usage
OS
Access
OS
OS
PSC
Code
Usage
1
3
PSC

OPDIV
Category
ACF
Category 01 Unauthorized Access
CDC
Category 05 - Scans,
Probes and Attempted
Access
11
CDC
Code
67
CDC
Category 99 - NonIncident
CDC
Category 04 Inappropriate Usage
CDC
33
CMS
Access
CMS
CMS
Code
Category 06 Investigation
Quantity
7
8
CMS
10
CMS
60
CMS
275
FDA
Access
FDA
FDA
FDA
HHS
Code
12
3
1
HRSA
IHS
Access
IHS
28
IHS
IHS
16
IHS
ITIO
NIH
Code
Code
4
5
22
NIH
104
NIH
59
NIH
Access
76
NIH
OS
Code
83
1
OS
OS
Access
OS
OPDIV
Category
Quantity
CDC
CDC
Usage
CDC
Access
54
CDC
CDC

29
CDC
Code
63
CMS

CMS
CMS
Code
CMS
392
CMS
Usage
11
CMS
Access
306
FDA
Access
19
FDA
Code
11
FDA
FDA

HRSA
Access
IHS
Code
IHS
IHS
Usage
IHS
Access
18
IHS

ITIO
Access
NIH
29
NIH
Usage
99
NIH
Access
61
NIH

86
NIH
Code
65
OIG
Access
16
OIG
Usage
OS
OS
Access
OS
PSC
Usage
Usage
1
4
PSC
PSC
Access
OPDIV
Category
CDC
CDC
CDC
20
CDC
Access
50
CDC
Code
77
CMS
15
CMS
233
CMS
CMS
CMS
CSIRC
Code
Quantity
1
2
873
1
FDA
FDA
FDA
FDA
HHS
Access
Code
7
8
1
HRSA
HRSA
IHS
IHS
28
IHS
Code
10
IHS
Access
ITIO
NIH
Category 02 - Denial of
Service
1
1
1
NIH
Access
61
NIH
Code
53
NIH
50
NIH
29
NIH
75
OCR
OIG
OIG
OIG
OS
OS
OS
OS
PSC
Access
PSC
PSC
SAMHSA
OPDIV
Category
ACF
AHRQ
CDC
Access
CDC
CDC
CDC
CMS
Code
Code
Quantity
32
21
34
1
CMS
CMS
280
CMS
227
CMS
Access
FDA
FDA
12
FDA
Access
10
FDA
FDA
Code
23
5
IHS
IHS
18
IHS
IHS
IHS
ITIO
ITIO
NIH
NIH
Code
Code
Code
1
1
2
2
1
42
27
NIH
93
NIH
42
NIH
Access
88
OIG
Access
OIG
OIG
OS
OS
OS
OS
Access
OS
PSC
PSC
OPDIV
Category
ACF
Category 03 Malicious Code
ACF
Category 00 - Network
Testing
ACF
ACF
CDC
12
CDC
CDC
CDC
CDC
Access
CDC
CMS

Quantity
188
2
31
58
8
CMS
21
CMS
86
CMS
Access
CMS
306
FDA
Access
28
FDA
FDA

10
2
FDA
37
FDA
FDA
Service
HRSA
HRSA
IHS
Access
IHS
IHS

8
2
IHS
17
IHS
ITIO
ITIO
ITIO
Access
NIH
90
NIH
24
NIH
Access
95
NIH
NIH

53
22
OIG
Access
OIG
OIG
OS
OS
Service
OS
OS
PSC
PSC
OPDIV
Category
ACF
ACF
ACF
CDC
Service
CDC
CDC
Access
19
CDC
11
CDC
CDC
Code
Quantity
2
72
CMS
Access
CMS
Code
CMS
323
CMS
56
CMS
14
FDA
FDA
19
FDA
FDA
FDA
Service
1
1
FDA
Access
14
FDA
Code
10
HRSA
HRSA
HRSA
HRSA
IHS
IHS
IHS
Code
Code
3
1
1
1
1
4
1
IHS
14
IHS
13
ITIO
ITIO
ITIO
Code
NIH
NIH
NIH
NIH
NIH
Code
2
2
33
1
83
30
21
NIH
Access
71
OS
OS
OS
OS
PSC
PSC
PSC
OPDIV
Category
CDC
CDC
12
CDC
Access
CDC
CMS
CMS
Access
CMS
CMS

Quantity
54
365
2
2
127
CMS
51
FDA
FDA
10
FDA
13
FDA
Access
HRSA
IHS
Access
IHS
IHS

16
1
6
IHS
IHS
Category 02 - Denial
of Service
IHS
ITIO
NIH
28
NIH
22
NIH
17
NIH
Access
58
NIH
20
OIG
OS
OS
PSC
SAMHSA
OPDIV
Category
ACF
CDC
CDC
Code
55
CDC
Access
39
CDC
16
CMS
28
CMS
309
CMS
CMS
FDA
Code
Quantity
111
3
1
FDA
23
FDA
Code
30
FDA
Access
12
HRSA
HRSA
HRSA
Code
2
2
IHS
18
IHS
IHS
ITIO
ITIO
ITIO
NIH
Code
Code
Code
1
2
1
18
23
NIH
Access
90
NIH
22
NIH
22
NIH
21
OS
OS
OS
OS
PSC
Code
1
1
PSC
TIC
OPDIV
Category
ACF
ACF
Access
ACF
Usage
AHRQ
Usage
AoA
Access
AoA
Usage
CDC

CDC
CDC
Code
Usage
Quantity
34
29
2
CDC
Access
CMS
Code
CMS
95
CMS
Usage
24
20
2
CMS
Access
CMS

FDA
FDA
Usage
FDA
Access
14
FDA

FDA
Code
HRSA
Access
HRSA
Code
IHS

IHS
Code
IHS
IHS
Usage
13
IHS
Access
ITIO
ITIO
ITIO
ITIO
NIH
NIH
Code
Usage
Testing
Code
249
11
13
4
1
32
26
NIH
NIH
NIH
Access
Usage
Service
34
34
1
NIH

64
OIG
Access
OS

OS
Service
OS
OS
Usage
PSC
PSC
SAMHSA
Usage
Usage
2
1
OPDIV
Category
CDC
Access
CDC
Code
CDC
CDC
Usage
CDC
Access
16
CMS
75
CMS
CMS
CMS
CMS
CMS
FDA
FDA
Usage
Service
Access
Code
Access
Access
Usage
Quantity
29
16
1
1
4
316
15
2
FDA
Access
13
FDA
FDA
Code
HRSA
HRSA
Access
HRSA
Usage
IHS
Access
IHS
IHS
IHS
IHS
ITIO
ITIO
ITIO
ITIO
NIH
NIH
NIH
NIH
NIH
Access
Code
Usage
Code
Usage
Access
Usage
Service
Access
Access
16
3
4
3
9
29
1
1
2
40
41
1
98
28
NIH
Code
OIG
Access
OIG
OS
Usage
OS
Access
OS
OS
Code
PSC
PSC
Code
45
OPDIV
Category
Quantity
ACF
Access
AHRQ
CDC

10
CDC
Access
15
CDC
Code
27
CDC
CMS
Usage
28
CMS
Access
304
CMS
350
CMS

CMS
Code
CSIRC
FDA
Usage
14
FDA
Access
19
FDA

FDA
Code
FDA
HHS
HRSA
HRSA
Code
IHS
IHS
Access
IHS
ITIO
Usage
Code
11
27
ITIO
Access
ITIO

Testing
Usage
Service
44
NIH

63
NIH
Code
44
NIH
28
NIH
Access
33
ITIO
NIH
NIH
OS
Code
OS
Access
OS
OS
Usage
Service
2
1
OS
PSC
Access
SAMHSA
Access
OPDIV
Category
AHRQ
Access
AHRQ
Code
CDC
Access
CDC
Access
60
CDC
Code
38
CDC
CMS
Usage
14
CMS
Access
357
CMS
140
CMS
CMS
Access
Code
Quantity
10
3
CSIRC
FDA
Access
FDA
Code
11
FDA
Access
19
FDA
FDA
Usage
FDA
Service
HRSA
IHS
IHS
Access
Code
4
4
IHS
Access
15
IHS
IHS
Usage
25
ITIO
Code
14
ITIO
Access
ITIO
Usage
ITIO
NIH
Access
73
NIH
Access
30
NIH
Code
25
NIH
31
NIH
Service
NIH
Usage
OS
Code
OS
Access
OS
PSC
Usage
PSC
PSC
Access
1
72
OPDIV
Category
Quantity
AHRQ
Code
CDC
CDC
Code
CDC
Access
CDC
52
CMS
11
CMS
Service
CMS
Access
CMS
Code
CMS
373
CMS
104
FDA
Access
FDA
19
FDA
HRSA
HRSA
Code
Code
4
4
1
HRSA
IHS
Access
IHS
21
IHS
IHS
IHS
ITIO
ITIO
Code
Code
2
1
18
3
25
ITIO
ITIO
NIH
Access
78
NIH
NIH
Code
24
18
NIH
58
NIH
28
OIG
OIG
OS
OS
OS
Access
OS
Code
PSC
PSC
PSC
TIC
TIC
Code
1
4
OPDIV
Category
ACF
AHRQ
CDC
37
CDC
CDC
CDC
Access
CMS
Access
14
CMS
13
CMS
334
CMS
CMS
Quantity
109
10
CMS
FDA
FDA
Testing
2
3
2
FDA
Access
FDA
10
HRSA
HRSA
Access
HRSA
IHS
19
IHS
IHS
Access
IHS
IHS

1
3
ITIO
ITIO
ITIO
ITIO
1
7
NIH
63
NIH
28
NIH
Access
91
NIH
NIH
OS

35
24
2
OS
OS
PSC
PSC
SAMHSA
TIC
TIC
OPDIV
Category
AHRQ
AoA
Access
CDC
Access
CDC
16
CDC
CDC
CMS
CMS
CMS
Code
Access
Code
Quantity
5
5
16
9
120
CMS
10
CMS
288
FDA
Access
FDA
17
FDA
FDA
Code
1
3
HRSA
Access
HRSA
HRSA
HRSA
Code
2
2
IHS
23
IHS
12
IHS
Access
IHS
IHS
Code
4
5
ITIO
Access
ITIO
ITIO
ITIO
Code
2
18
NIH
64
NIH
23
NIH
Access
80
NIH
NIH
Code
27
36
OS
OS
OS
OS
PSC
Code
3
1
1
PSC
PSC
TIC
OPDIV
Category
ACF
ACF
ACF
AHRQ
AHRQ
CDC
Access
15
CDC
CDC
Code
Quantity
11
10
CDC
CDC
21
CMS
276
CMS
106
CMS
CMS
Service
CMS
Access
CMS
Code
FDA
Access
FDA
FDA
Code
26
12
2
1
2
FDA
FDA
18
HRSA
Code
HRSA
IHS
Code
IHS
IHS
IHS
ITIO
ITIO
ITIO
ITIO
Access
ITIO
Code
NIH
Access
NIH
Code
37
NIH
37
NIH
18
NIH
66
NIH
Service
OIG
OIG
Access
OS
Code
OS
OS
PSC
1
15
102
3
3
PSC
PSC
SAMHSA
SAMHSA
TIC
OPDIV
Category
CDC
CDC
20
CDC
Access
14
CDC
Code
CDC
CMS
101
CMS
29
CMS
264
CMS
Access
14
CMS
FDA
FDA
Code
Code
Quantity
33
2
2
FDA
21
FDA
Access
HRSA
Access
HRSA
HRSA
HRSA
Code
7
8
IHS
26
IHS
13
IHS
IHS
ITIO
ITIO
ITIO
Code
Code
ITIO
NIH
Access
NIH
NIH
Code
3
3
1
3
40
2
100
32
32
NIH
56
NIH
28
OIG
OIG
OS
Access
OS
OS
Code
3
9
OS
OS
TIC
OPDIV
Category
CDC
CDC
Access
19
CDC
Code
12
CDC
CDC
CDC
12
CMS
79
CMS
Access
37
CMS
CMS
CMS
CMS
Code
Testing
Quantity
6
27
1
1
32
CMS
CSIRC
FDA
FDA
26
FDA
Access
FDA
FDA
HRSA
HRSA
Code
Code
282
3
1
7
17
HRSA
Access
IHS
Access
IHS
IHS
Code
3
1
IHS
41
IHS
40
IHS
ITIO
ITIO
Code
2
3
33
ITIO
NIH
Access
NIH
NIH
Code
108
35
32
NIH
59
NIH
20
OIG
OIG
OS
OS
OS
OS
PSC
PSC
Code
Code
3
2
2
1
OPDIV
Category
AHRQ
Access
CDC
Access
CDC
Code
CDC
CDC
Usage
CDC
Access
18
CMS
10
CMS
Usage
25
CMS
Access
237
CMS
76
CMS
CMS
CMS
Access
Code
Category 99 Non-Incident
Quantity
13
19
22
2
FDA
Access
FDA
Access
17
FDA
FDA
Code
HRSA
HRSA
HRSA
Code
Access
4
3
HRSA
Access
IHS
IHS
Code
IHS
IHS
Usage
24
IHS
Access
27
ITIO
Code
19
ITIO
Usage
ITIO
NIH
20
NIH
Usage
72
NIH
Access
18
NIH
NIH
Access
Code
84
22
OIG
Usage
OIG
Access
OS
Usage
OS
OS
Code
PSC
Usage
OPDIV
Category
AHRQ
CDC
CDC
CDC
16
CDC
CDC
Access
CDC
Code
CMS
CMS
Access
CMS
CMS
CMS
Category 99 NonIncident
Code
Quantity
16
5
253
5
1
16
3
CMS
16
CMS
105
FDA
Access
FDA
FDA
FDA
Service
Code
4
1
3
2
FDA
17
HRSA
HRSA
Code
12
IHS
30
IHS
Access
IHS
IHS
IHS
ITIO
ITIO
NIH
NIH
Code
Code
1
8
38
35
1
1
57
NIH
23
NIH
14
NIH
Access
86
NIH
OS
OS
OS
OS
Code
Code
17
1
2
2
2
OS
OS
PSC
PSC
PSC
OPDIV
Category
AHRQ
CDC
Access
CDC
CDC
Code
CDC
CDC
CMS
78
CMS
Access
22
CMS
CMS
CMS
CMS
Code
Testing
Quantity
12
24
1
5
1
CMS
25
CMS
250
CSIRC
FDA
FDA
Code
1
3
2
FDA
FDA
16
FDA
FDA
Access
HRSA
Access
HRSA
HRSA
Code
IHS
Access
IHS
IHS
Code
3
4
IHS
23
IHS
19
ITIO
ITIO
NIH
NIH
NIH
Code
Access
Code
3
26
58
23
23
NIH
60
NIH
22
OIG
OS
OS
OS
OS
PSC
Code
1
2
1
PSC
PSC
SAMHSA
SAMHSA
Category 05 Scans/Probes/Attempted
Access
1
1
OPDIV
Category
ACF
ACF
CDC
Access
CDC
CDC
CDC
CMS
Code
Access
Quantity
25
12
2
CMS
34
CMS
282
CMS
67
CMS
Access
31
CMS
Code
10
FDA
FDA
FDA
19
FDA
Access
FDA
Code
HRSA
Access
HRSA
HRSA
HRSA
IHS
Code
4
2
1
IHS
15
IHS
25
IHS
IHS
ITIO
ITIO
ITIO
ITIO
NIH
Code
Service
Code
1
3
1
11
1
1
18
NIH
61
NIH
27
NIH
Access
87
NIH
OIG
OS
OS
OS
Code
Code
31
2
2
2
2
OS
PSC
PSC
OPDIV
Category
ACF
CDC
Access
CDC
CDC
Code
CDC
CDC
14
CMS
CMS
Access
Quantity
3
1
CMS
86
CMS
231
CMS
CMS
Unknown
1
35
CMS
CMS
CSIRC
FDA
FDA
Access
Code
Code
Code
29
10
1
2
3
FDA
FDA
19
FDA
Access
HRSA
HRSA
Code
1
1
HRSA
IHS
IHS
IHS
IHS
ITIO
ITIO
ITIO
ITIO
Code
Service
Code
1
7
1
3
1
1
ITIO
NIH
16
NIH
50
NIH
34
NIH
Access
80
NIH
OIG
Code
Service
24
1
OIG
Access
OS
OS
OS
PSC
OPDIV
Category
Quantity
ACF
ACF
ACF
Category 01 Unauthorized
Access
AHRQ
Access
CDC
29
CDC
13
CDC
CDC
Access
32
CDC
Category 05 Scans, Probes and

Attempted Access
11
CMS

Attempted Access
19
CMS
12
CMS
CMS
Category 05 Scans/Probes/Attem
pted Access
CMS
89
CMS
CMS
CMS
FDA
Unknown
Access
112
118
44
3
FDA

Attempted Access
FDA
Access
FDA
pted Access
FDA
HRSA
HRSA
Access
HRSA
IHS

Attempted Access
17
IHS
IHS
IHS
52
IHS
Access
60
ITIO
ITIO
ITIO
Access
5
1
2
ITIO

Attempted Access
ITIO
ITIO
ITIO
pted Access
NIH
pted Access
NIH
68
NIH
NIH
Access
30
21
NIH

Attempted Access
NIH
OIG
OIG
OIG

Attempted Access
OIG
Access
OS

Attempted Access
OS
OS
OS
OS
Access
PSC
PSC
PSC
SAMHSA
Access
105
15
6
2
2
SAMHSA
Access
OPDIV
Category
ACF
ACF
AHRQ
AHRQ
AHRQ
CDC
CDC
Code
11
CDC
Access
12
CDC
38
CMS
CMS
Unknown
Quantity
178
16
CMS
Access
CMS
Code
CMS
CMS
CMS
CMS
CMS
CSIRC
FDA
FDA
FDA

Access
Service
Access
Code
72
4
11
68
1
1
5
1
1
FDA
Access
FDA
23
HRSA
HRSA
HRSA
IHS
Code
Access
1
4
2
1
IHS
23
IHS
14
IHS
IHS
IHS
ITIO
ITIO
ITIO
NIH
NIH
Access
Code
Code
Service
1
3
1
10
3
2
26
NIH
Access
79
NIH
Code
19
NIH
27
NIH
NIH
Access
1
5
NIH
59
OIG
OS
OS
OS
Access
OS
Code
OS
OS
PSC
Access
Code
3
2
1
PSC
SAMHSA
TIC
OPDIV
Category
ACF
ACF
Code
ACF
AHRQ
CDC
Access
CDC
CDC
CDC
CMS
CMS
Code
Code
CMS
CMS
Access
CMS
Quantity
21
7
17
4
7
4
56
7
75
CMS
CMS
CMS
Unknown
Service
194
1
11
CMS
Access
FDA
15
FDA
FDA
FDA
FDA
FDA
HRSA
HRSA
HRSA
Access
Code
Code
1
4
5
1
2
1
1
1
HRSA
HRSA
IHS
IHS
IHS
IHS
Access
Code
2
2
1
36
IHS
ITIO
ITIO
ITIO
ITIO
Access
ITIO
NIH
Code
Access
6
2
NIH
58
NIH
22
NIH
19
NIH
Access
NIH
Code
OIG
OS
Access
OS
OS
OS
101
26
PSC
PSC
SAMHSA
Access
OPDIV
Category
Quantity
ACF
Access
AHRQ
Access
AHRQ
Access
AoA
Access
AoA
CDC
CDC
19
CDC
Access
16
CDC
Code
14
CDC
CMS
Access
CMS
81
CMS
CMS
CMS
CMS
CMS
CSIRC
FDA
FDA
FDA
Access
Unknown
Access
Code
Access
8
8
75
209
16
1
2
4
3
FDA
FDA
18
FDA
HRSA
Access
HRSA
HRSA
HRSA
IHS
IHS
IHS
IHS
ITIO
ITIO
Code
Access
Code
Testing
1
2
1
2
1
27
1
4
ITIO
ITIO
ITIO
ITIO
Access
ITIO
Code
NIH
49
NIH
38
NIH
16
NIH
Access
NIH
Code
176
23
NIH
NIH
Access
3
2
OIG
OS
Access
OS
OS
Code
1
1
OS
OS
PSC
Access
PSC
SAMHSA
SAMHSA
Access
OPDIV
ACF
Functional Impact
None
Information Impact
Integrity
Recoverability Effort
Regular
ACF
None
None
Regular
ACF
None
None
Regular
ACF
None
None
Not Applicable
ACF
None
Privacy
Regular
ACF
None
Integrity
Regular
AHRQ
None
None
Regular
AHRQ
None
None
Not Applicable
AHRQ
None
None
Not Applicable
CDC
None
Privacy
Regular
CDC
None
Privacy
Regular
CDC
CDC
None
None
None
None
Regular
Regular
CDC
None
None
Regular
CDC
None
None
Regular
CDC
None
None
Not Recoverable
CDC
CDC
CDC
CDC
None
None
None
None
None
None
None
None
Not Applicable
Not Recoverable
Not Applicable
Not Applicable
CDC
None
None
Not Applicable
CMS
None
None
Not Applicable
CMS
None
None
Regular
CMS
CMS
CMS
CMS
Low
Low
None
None
Privacy
Integrity
None
Privacy
Extended
Regular
Regular
Regular
CMS
None
None
Not Applicable
CMS
None
None
Not Applicable
CMS
None
Privacy
Regular
CMS
CMS
None
None
None
None
Not Applicable
Not Applicable
CMS
None
Privacy
Not Recoverable
CMS
None
Privacy
Regular
CMS
None
Proprietary
Regular
CMS
CMS
None
None
None
None
Not Applicable
Not Applicable
CMS
Medium
Privacy
Not Applicable
CMS
CMS
CMS
None
None
None
Privacy
Privacy
Privacy
Not Applicable
Regular
Regular
CMS
None
None
Extended
CMS
CMS
CMS
CMS
CMS
CMS
Medium
None
None
None
None
Medium
Privacy
Privacy
Privacy
Privacy
Integrity
None
Not Applicable
Not Recoverable
Regular
Not Applicable
Regular
Regular
CMS
None
Privacy
Not Applicable
CMS
Medium
Proprietary
Not Applicable
CMS
Low
Privacy
Supplemented
CMS
CMS
None
Low
Privacy
Privacy
Not Applicable
Not Recoverable
CMS
Low
Privacy
Extended
CMS
Low
Integrity
Regular
CMS
CMS
CMS
Low
None
Medium
Privacy
Privacy
Privacy
Regular
Extended
Regular
CMS
Low
Integrity
Extended
CMS
None
Privacy
Extended
CMS
CMS
CMS
CMS
CMS
Medium
Low
Low
None
Medium
Privacy
Privacy
None
Privacy
Privacy
Regular
Not Applicable
Regular
Extended
Not Applicable
CMS
Low
Privacy
Not Applicable
CMS
Low
None
Regular
CMS
High
None
Not Applicable
CMS
None
None
Regular
CMS
Low
Privacy
Not Applicable
CMS
Low
None
Not Applicable
CMS
CMS
CSIRC
FDA
FDA
FDA
FDA
FDA
High
None
None
None
None
None
None
None
Integrity
None
None
None
None
Integrity
Integrity
None
Regular
Regular
Regular
Regular
Regular
Regular
Regular
Regular
FDA
None
None
Not Recoverable
FDA
None
None
Not Applicable
FDA
None
None
Not Applicable
FDA
None
None
Regular
FDA
None
None
Not Applicable
FDA
None
None
Regular
FDA
None
None
Regular
FDA
None
None
Extended
HRSA
HRSA
HRSA
IHS
None
None
None
None
None
None
Integrity
None
Not Applicable
Not Applicable
Regular
Regular
IHS
None
Privacy
Regular
IHS
None
Privacy
Regular
IHS
None
Privacy
Not Recoverable
ITIO
ITIO
None
None
None
None
Regular
Regular
ITIO
None
None
Regular
ITIO
ITIO
ITIO
ITIO
ITIO
ITIO
NIH
NIH
NIH
NIH
None
None
None
Low
None
None
None
None
Low
None
None
None
Integrity
None
Integrity
Integrity
Integrity
Integrity
None
None
Regular
Not Applicable
Regular
Regular
Regular
Regular
Regular
Regular
Regular
Regular
NIH
None
None
Regular
NIH
None
None
Regular
NIH
None
None
Regular
NIH
NIH
NIH
NIH
NIH
None
None
None
None
None
None
Privacy
Privacy
None
None
Regular
Regular
Not Applicable
Not Applicable
Regular
NIH
NIH
NIH
NIH
OIG
None
None
None
None
None
None
None
None
None
Privacy
Not Applicable
Regular
Not Applicable
Not Applicable
Regular
OIG
None
Privacy
Regular
OIG
None
None
Regular
OS
None
Privacy
Regular
OS
OS
OS
None
None
None
Privacy
Privacy
None
Regular
Regular
Regular
PSC
None
Privacy
Regular
PSC
PSC
PSC
None
None
None
Privacy
None
None
Regular
Regular
Not Applicable
PSC
Low
Privacy
Regular
PSC
None
Privacy
Regular
Threat Vector
Email
Quantity
1
Unknown
Email
Unknown
Loss or Theft of
Equipment
Unknown
Loss or Theft of
Equipment
Unknown
Email
Other
Improper Usage
Web
Unknown
7
2
Loss or Theft of
Equipment
Email
19
Loss or Theft of
Equipment
Email
Email
Unknown
Other
7
3
1
1
Loss or Theft of
Equipment
Loss or Theft of
Equipment
Email
Other
Web
Unknown
Other
Improper Usage
Web
3
1
2
116
2
15
Loss or Theft of
Equipment
Email
Unknown
1
4
Loss or Theft of
Equipment
Improper Usage
46
Improper Usage
Attrition
Other
Loss or Theft of
Equipment
Unknown
Email
Web
Loss or Theft of
Equipment
Email
Other
Unknown
Other
Web
Unknown
1
16
2
1
23
1
3
20
2
7
33
2
1
Improper Usage
Loss or Theft of
Equipment
Impersonation/Sp
oofing
Email
Unknown
1
4
1
Improper Usage
Impersonation/Sp
oofing
Email
Other
Other
1
1
1
9
2
Loss or Theft of
Equipment
Improper Usage
Email
Unknown
Web
Email
Other
3
2
1
1
6
Improper Usage
Loss or Theft of
Equipment
Loss or Theft of
Equipment
Loss or Theft of
Equipment
Email
Loss or Theft of
Equipment
Email
Web
Web
Email
Other
Other
Web
Attrition
1
5
1
1
1
1
2
2
Loss or Theft of
Equipment
Other
Loss or Theft of
Equipment
Loss or Theft of
Equipment
11
Email
Improper Usage
Unknown
Loss or Theft of
Equipment
Web
Unknown
Web
Unknown
1
1
2
1
Improper Usage
18
Email
Improper Usage
Web
Unknown
1
1
Loss or Theft of
Equipment
Email
Email
Web
Unknown
Unknown
Email
Email
Web
Email
Other
3
1
4
1
4
2
6
1
2
8
Loss or Theft of
Equipment
18
Improper Usage
45
Impersonation/Sp
oofing
Email
Unknown
Other
Unknown
Web
2
157
1
1
1
12
Other
Unknown
Email
Attrition
Other
11
18
1
1
1
Improper Usage
Email
Improper Usage
Email
Unknown
Web
1
1
1
Improper Usage
Email
Unknown
Other
1
2
1
Improper Usage
Other
OPDIV
CDC
CMS
CMS
Functional Impact
None
None
Low
Information Impact
Privacy
Privacy
Privacy
Extended
Extended
Extended
CMS
None
None
Extended
NIH
None
None
Extended
NIH
Low
Privacy
Extended
AHRQ
None
None
Not Applicable
CDC
CDC
CDC
None
None
None
None
None
None
Not Applicable
Not Applicable
Not Applicable
CDC
None
None
Not Applicable
CMS
None
Privacy
Not Applicable
CMS
CMS
CMS
CMS
CMS
CMS
CMS
CMS
CMS
CMS
Medium
Low
None
Low
None
Low
None
None
Low
None
Privacy
None
Privacy
Privacy
Privacy
Privacy
Privacy
None
Privacy
None
Not Applicable
Not Applicable
Not Applicable
Not Applicable
Not Applicable
Not Applicable
Not Applicable
Not Applicable
Not Applicable
Not Applicable
CMS
Low
None
Not Applicable
CMS
None
None
Not Applicable
CMS
None
None
Not Applicable
CMS
Medium
Privacy
Not Applicable
CMS
None
None
Not Applicable
CMS
CMS
CMS
CMS
Medium
Medium
Low
Medium
Privacy
None
None
Privacy
Not Applicable
Not Applicable
Not Applicable
Not Applicable
CMS
CMS
Medium
Low
None
None
Not Applicable
Not Applicable
FDA
Low
Integrity
Not Applicable
FDA
None
None
Not Applicable
FDA
None
None
Not Applicable
FDA
Medium
Integrity
Not Applicable
HRSA
HRSA
None
None
None
None
Not Applicable
Not Applicable
HRSA
None
None
Not Applicable
IHS
ITIO
ITIO
ITIO
NIH
NIH
None
Low
None
None
None
None
None
None
None
None
None
None
Not Applicable
Not Applicable
Not Applicable
Not Applicable
Not Applicable
Not Applicable
NIH
None
None
Not Applicable
NIH
None
None
Not Applicable
CDC
None
None
Not Recoverable
CMS
CMS
None
Low
Privacy
Privacy
Not Recoverable
Not Recoverable
CMS
None
Privacy
Not Recoverable
CMS
None
None
Not Recoverable
CMS
None
None
Not Recoverable
CMS
None
Privacy
Not Recoverable
FDA
None
None
Not Recoverable
FDA
Low
None
Not Recoverable
ACF
Low
Privacy
Regular
ACF
ACF
None
None
Privacy
Integrity
Regular
Regular
ACF
Medium
Privacy
Regular
AHRQ
None
Privacy
Regular
AHRQ
CDC
CDC
None
Medium
None
None
Integrity
None
Regular
Regular
Regular
CDC
None
Privacy
Regular
CDC
None
None
Regular
CDC
None
None
Regular
CDC
CMS
CMS
CMS
CMS
CMS
None
Medium
None
None
None
None
Integrity
Integrity
Privacy
None
Privacy
None
Regular
Regular
Regular
Regular
Regular
Regular
CMS
None
Privacy
Regular
CMS
None
None
Regular
CMS
None
Privacy
Regular
CMS
None
None
Regular
CMS
CMS
None
Low
Privacy
None
Regular
Regular
CMS
None
None
Regular
CMS
CMS
CMS
FDA
Low
Medium
Medium
None
None
Privacy
Privacy
None
Regular
Regular
Regular
Regular
FDA
None
None
Regular
FDA
None
Integrity
Regular
FDA
HRSA
Low
None
Integrity
Integrity
Regular
Regular
IHS
IHS
IHS
Low
None
None
None
Integrity
Privacy
Regular
Regular
Regular
IHS
None
Privacy
Regular
IHS
IHS
ITIO
ITIO
ITIO
None
None
Low
None
High
Privacy
None
None
None
None
Regular
Regular
Regular
Regular
Regular
ITIO
None
Proprietary
Regular
ITIO
ITIO
ITIO
ITIO
ITIO
ITIO
NIH
Low
Medium
None
Low
Low
None
None
None
None
Privacy
None
Privacy
None
None
Regular
Regular
Regular
Regular
Regular
Regular
Regular
NIH
None
None
Regular
NIH
None
Privacy
Regular
NIH
NIH
NIH
NIH
NIH
None
None
None
None
Low
None
Integrity
Integrity
None
Integrity
Regular
Regular
Regular
Regular
Regular
NIH
Low
Privacy
Regular
NIH
None
None
Regular
NIH
None
None
Regular
NIH
None
None
Regular
OIG
OIG
OIG
OS
OS
OS
OS
None
None
Low
None
None
Low
Low
Privacy
Privacy
Privacy
None
None
Privacy
Integrity
Regular
Regular
Regular
Regular
Regular
Regular
Regular
PSC
None
Privacy
Regular
PSC
Low
Privacy
Regular
SAMHSA
None
None
Regular
Threat Vector
Unknown
Other
Other
Quantity
1
2
3
Loss or Theft of
Equipment
Loss or Theft of
Equipment
Unknown
Other
Unknown
Email
Other
1
5
1
Loss or Theft of
Equipment
Improper Usage
Other
Other
Email
Unknown
Unknown
Other
Other
Web
Email
Unknown
1
4
1
1
7
1
31
9
2
3
Improper Usage
Other
Loss or Theft of
Equipment
Improper Usage
Improper Usage
Email
Other
Web
Web
13
1
2
1
Email
Unknown
1
4
Loss or Theft of
Equipment
Other
Loss or Theft of
Equipment
Loss or Theft of
Equipment
Web
Unknown
4
1
Loss or Theft of
Equipment
Other
Web
Web
Other
Unknown
Other
Loss or Theft of
Equipment
Email
1
1
1
1
1
154
2
12
Loss or Theft of
Equipment
Other
Unknown
7
2
Loss or Theft of
Equipment
Other
Loss or Theft of
Equipment
Unknown
25
Loss or Theft of
Equipment
Loss or Theft of
Equipment
Unknown
Email
Unknown
1
1
Loss or Theft of
Equipment
Improper Usage
Other
Unknown
Email
1
1
21
Improper Usage
Unknown
Loss or Theft of
Equipment
Unknown
Other
Unknown
Web
Other
Unknown
2
1
22
7
165
3
Loss or Theft of
Equipment
Other
Improper Usage
24
Loss or Theft of
Equipment
Email
Web
24
1
Improper Usage
Other
Other
Email
Unknown
1
4
3
1
Loss or Theft of
Equipment
Improper Usage
Email
Email
1
1
Unknown
Other
Other
1
1
1
Improper Usage
Email
Unknown
Web
Unknown
Email
Improper Usage
Unknown
Email
Email
Email
Email
Web
Email
Impersonation/Sp
oofing
Improper Usage
Web
Web
Email
Unknown
Email
10
1
9
2
2
1
3
4
1
2
3
2
65
1
1
13
1
1
6
1
Improper Usage
Other
Loss or Theft of
Equipment
11
Improper Usage
39
Other
Email
Email
Web
Unknown
Email
Web
1
2
1
1
2
1
1
Improper Usage
Email
Unknown
OPDIV
CMS
CMS
Functional Impact
Low
Low
Information Impact
Privacy
Privacy
Extended
Extended
CMS
None
None
Extended
CMS
None
None
Extended
CMS
None
Privacy
Extended
CMS
None
Privacy
Extended
CMS
None
Privacy
Extended
CMS
None
Privacy
Extended
CMS
None
Proprietary
Extended
FDA
CMS
None
Low
Privacy
Privacy
Extended
Not Applicable
CMS
Low
Integrity
Not Applicable
CMS
Low
Integrity
Not Applicable
CMS
CMS
CMS
Low
Low
Low
Integrity
Proprietary
Privacy
Not Applicable
Not Applicable
Not Applicable
CMS
Low
Privacy
Not Applicable
CMS
Low
Privacy
Not Applicable
CMS
Low
None
Not Applicable
CMS
FDA
Low
Low
None
Integrity
Not Applicable
Not Applicable
FDA
Low
None
Not Applicable
ITIO
CMS
CMS
CMS
Low
Medium
Medium
Medium
None
None
None
Privacy
Not Applicable
Not Applicable
Not Applicable
Not Applicable
CMS
Medium
Privacy
Not Applicable
CMS
Medium
Privacy
Not Applicable
CDC
None
None
Not Applicable
CDC
CMS
CMS
CMS
CMS
None
None
None
None
None
None
None
None
None
Privacy
Not Applicable
Not Applicable
Not Applicable
Not Applicable
Not Applicable
CMS
None
None
Not Applicable
CMS
CMS
None
None
Privacy
Privacy
Not Applicable
Not Applicable
CMS
None
None
Not Applicable
CMS
None
Privacy
Not Applicable
CMS
None
Privacy
Not Applicable
CMS
None
None
Not Applicable
FDA
None
None
Not Applicable
FDA
None
None
Not Applicable
HRSA
None
None
Not Applicable
HRSA
NIH
NIH
NIH
CMS
None
None
None
None
Low
Integrity
None
None
None
Privacy
Not Applicable
Not Applicable
Not Applicable
Not Applicable
Not Recoverable
FDA
Low
None
Not Recoverable
OIG
Low
Privacy
Not Recoverable
CDC
None
None
Not Recoverable
CMS
CMS
CMS
None
None
None
Privacy
Privacy
Privacy
Not Recoverable
Not Recoverable
Not Recoverable
FDA
None
None
Not Recoverable
NIH
None
None
Not Recoverable
CMS
ACF
ACF
CMS
CMS
High
Low
Low
Low
Low
Privacy
Integrity
Privacy
Integrity
Privacy
Regular
Regular
Regular
Regular
Regular
CMS
Low
Privacy
Regular
CMS
CMS
Low
Low
None
Privacy
Regular
Regular
CMS
Low
None
Regular
CMS
Low
Privacy
Regular
CMS
FDA
FDA
FDA
ITIO
ITIO
ITIO
ITIO
Low
Low
Low
Low
Low
Low
Low
Low
Privacy
Integrity
Integrity
Integrity
Integrity
Privacy
None
None
Regular
Regular
Regular
Regular
Regular
Regular
Regular
Regular
NIH
Low
None
Regular
NIH
Low
None
Regular
NIH
Low
None
Regular
NIH
Low
Integrity
Regular
OIG
Low
Integrity
Regular
OS
Low
Privacy
Regular
PSC
Low
Integrity
Regular
SAMHSA
Low
Integrity
Regular
AHRQ
Medium
None
Regular
CMS
Medium
Privacy
Regular
CMS
Medium
Privacy
Regular
CMS
ITIO
ITIO
OS
AHRQ
Medium
Medium
Medium
Medium
None
Privacy
None
None
None
Privacy
Regular
Regular
Regular
Regular
Regular
CDC
None
Privacy
Regular
CDC
None
None
Regular
CDC
None
None
Regular
CDC
None
None
Regular
CMS
None
Privacy
Regular
CMS
CMS
None
None
Privacy
None
Regular
Regular
CMS
None
Privacy
Regular
CMS
CMS
CMS
CMS
None
None
None
None
Privacy
Integrity
None
None
Regular
Regular
Regular
Regular
CMS
None
None
Regular
CMS
CMS
None
None
Privacy
Privacy
Regular
Regular
CMS
None
None
Regular
FDA
FDA
None
None
Privacy
None
Regular
Regular
FDA
None
None
Regular
FDA
None
Privacy
Regular
IHS
IHS
None
None
Privacy
Privacy
Regular
Regular
IHS
None
Privacy
Regular
IHS
None
Privacy
Regular
ITIO
None
Privacy
Regular
ITIO
ITIO
ITIO
ITIO
NIH
None
None
None
None
None
Privacy
None
None
Privacy
None
Regular
Regular
Regular
Regular
Regular
NIH
None
Integrity
Regular
NIH
NIH
None
None
None
None
Regular
Regular
NIH
None
None
Regular
NIH
None
None
Regular
NIH
NIH
None
None
Privacy
None
Regular
Regular
NIH
None
Privacy
Regular
OS
None
Privacy
Regular
OS
PSC
None
None
Privacy
Privacy
Regular
Regular
PSC
None
Privacy
Regular
PSC
None
Privacy
Regular
SAMHSA
None
Privacy
Regular
SAMHSA
None
None
Regular
SAMHSA
None
Privacy
Regular
Threat Vector
Email
Other
Quantity
2
10
Loss or Theft of
Equipment
Improper Usage
Other
Loss or Theft of
Equipment
Improper Usage
Email
Loss or Theft of
Equipment
Other
Unknown
1
2
Loss or Theft of
Equipment
Improper Usage
Email
Other
Other
1
1
5
Loss or Theft of
Equipment
Improper Usage
Loss or Theft of
Equipment
Attrition
Other
1
1
Loss or Theft of
Equipment
Other
Unknown
Other
Other
1
1
1
1
Loss or Theft of
Equipment
Email
Loss or Theft of
Equipment
Other
Email
Unknown
Other
Unknown
Loss or Theft of
Equipment
Email
Other
2
1
5
3
12
1
16
33
Improper Usage
Loss or Theft of
Equipment
Improper Usage
Web
26
Loss or Theft of
Equipment
Web
Loss or Theft of
Equipment
Email
Email
Web
Other
Unknown
1
5
1
116
1
Loss or Theft of
Equipment
Email
Loss or Theft of
Equipment
Email
Unknown
Other
1
11
1
Other
Loss or Theft of
Equipment
Email
Unknown
Email
Unknown
Unknown
1
1
1
2
1
Loss or Theft of
Equipment
Web
Other
1
6
Loss or Theft of
Equipment
Improper Usage
Email
Email
Web
Unknown
Unknown
Email
Web
Unknown
2
2
1
2
1
3
9
4
Loss or Theft of
Equipment
Improper Usage
Email
Loss or Theft of
Equipment
Unknown
Improper Usage
Unknown
Unknown
Improper Usage
Other
Loss or Theft of
Equipment
Email
Web
Unknown
Web
Email
2
2
1
1
1
Improper Usage
Web
Loss or Theft of
Equipment
Email
Loss or Theft of
Equipment
Other
Email
13
1
141
1
Improper Usage
18
Email
Other
Web
Other
19
1
9
5
Loss or Theft of
Equipment
Web
Unknown
2
2
42
Improper Usage
Other
Unknown
1
2
Loss or Theft of
Equipment
Improper Usage
Unknown
Other
1
3
Improper Usage
Email
18
Improper Usage
Email
Web
Unknown
Other
Web
2
2
1
1
9
Improper Usage
Unknown
Other
2
5
Loss or Theft of
Equipment
17
Improper Usage
33
Other
Email
1
28
Improper Usage
Improper Usage
Email
Other
1
1
Improper Usage
Email
Email
Loss or Theft of
Equipment
Loss or Theft of
Equipment

HHS Cybersecurity Incident Reports

Încărcat de

Informații document

Drepturi de autor

Formate disponibile

Partajați acest document

Partajați sau inserați document

Opțiuni de partajare

Vi se pare util acest document?

Este necorespunzător acest conținut?

Drepturi de autor:

Formate disponibile

HHS Cybersecurity Incident Reports

Încărcat de

Drepturi de autor:

Formate disponibile

Caveats:

HHS Operational Divisions

Administration for Children and Families

Centers for Disease Control and Prevention

Centers for Medicare and Medicaid Services

Computer Security Incident Response Center

Food and Drug Administration

Indian Health Services

Office of the Secretary

National Institutes of Health

Office of Inspector General

Office of the Secretary

Program Support Center

Trusted Internet Connection

Category 00 - Network Testing

Category 01 - Unauthorized Access

Category 02 - Denial of Service

Category 03 - Malicious Code

Category 04 - Inappropriate Usage

An attack that does not fit into any other vector

Category 04 - Inappropriate Usage

Category 01 - Unauthorized Access

Category 05 - Scans, Probes and

Category 03 - Malicious Code

Category 03 - Malicious Code

Category 01 - Unauthorized Access

Category 04 - Inappropriate Usage

Category 02 - Denial of Service

Category 01 - Unauthorized Access

Category 05 - Scans, Probes and

Category 05 - Scans, Probes and

Category 01 - Unauthorized Access

Category 03 - Malicious Code

Category 04 - Inappropriate Usage

Category 01 - Unauthorized Access

Category 03 - Malicious Code

Category 03 - Malicious Code

Category 05 - Scans, Probes and

Category 01 - Unauthorized Access

Category 03 - Malicious Code

Category 04 - Inappropriate Usage

Category 01 - Unauthorized Access

Category 04 - Inappropriate Usage

Category 03 - Malicious Code

Category 01 - Unauthorized Access

Category 05 - Scans, Probes

Category 03 - Malicious Code

Category 05 - Scans, Probes

Category 03 - Malicious Code

Category 05 - Scans, Probes

Category 05 - Scans, Probes

Category 03 - Malicious Code

Category 05 - Scans, Probes

Category 05 - Scans, Probes

Category 03 - Malicious Code

Category 03 - Malicious Code

Category 05 - Scans, Probes

Category 05 - Scans, Probes

Category 05 - Scans, Probes

Category 05 - Scans, Probes

Category 05 - Scans, Probes

Category 01 Unauthorized Access

Category 04 Inappropriate Usage

Category 01 Unauthorized Access