Vets’ Data lost at eBenefits

| January 21, 2014

TSO sends us a link to the story at Fed Scoop that veterans enrolled at eBenefits may have lost their data to a breech this weekend.

VA has been investigating a problem with the joint VA-Defense Department eBenefits system since Jan. 15, when several veterans reported being able to see the personal information belonging to other veterans when they logged into the system. An internal VA memo obtained by FedScoop showed approximately 10,000 veterans had logged into the system during the time frame when the glitch was discovered.

But new video footage obtained by FedScoop from Eric Grzelak, a disabled veteran who has tried unsuccessfully to alert VA to the problems, shows the glitch exposed the private records of multiple veterans for every person who was logged in. In addition, Grzelak’s video evidence shows it was possible to alter the records, placing at risk the private information of potentially tens of thousands or more veterans.

“I could see someone’s name, date of birth, Social Security number, what disabilities they had [and] how much they got paid,” Grzelak told FedScoop. “Everything you would look at would pull up someone else’s info. It would change every time you refreshed the page.”

“I think its a huge deal that I was able to change someone’s info,” Grzelak said. “Everyone needs to check now to make sure all their information is correct. I mean, you could change anything — bank info, home address. It was all open.”

Yeah, so you should check your eBenefits stuff, but keep your paws off of mine, OK? If you still haven’t got Lifelock or something similar, you really need to squeeze out a couple of bucks a month. Obviously, the VA doesn’t care as much about your information as they should, certainly quite a bit less than you care.

Category: Veterans' Affairs Department

9 Comments
Inline Feedbacks
View all comments
ChipNASA

I’m not too worried….I added a dependent almost a year ago and they said….” Yeah we see your claim, we’re working on it but we’re kind of busy (sent me an e-mail acknowledging the case) and they have no time frame for it being complete.
I did talk to a human on the phone a few months back and was told that the Baltimore regional office was about 15 to 18 months behind at best for reviewing and completing any updates.

Oh but we’ll give you back pay, so I got that going for me…which is nice.

clamsgotlegs

What was that Disabled Veteran Owned company that got that huge contract with the VA again? Was it for computer/data services?

Ex-PH2

OK, but if you’ve never registered with that portal, then what? I’ve never used it. Never needed to.

Oh, clams@2, that was All Points Logistics, with phildo.

rb325th

@1, I am in the same boat kind of… I got divorced and the kids both turned 18 and were cut off… but the ex wasn’t and the kids were still in school so I am owed all the dependent money for them still.

As to E-benefits, saw something from DAV that it was taken offline until they could fix it.

2/17 Air Cav

The feds will probably prosecute Grzelak for any alterations he made in an account not his. Sure, I know he did it to illustrate the harm that someone could do, but that won’t matter. Don’t get me wrong. I don’t suggest that he should be prosecuted. In fact, he should be given a freakin’ award–but I’m guessing that the feds won’t see it that way. It’s what they do best: hurt decent people that piss them off.

JarHead Pat

I’m shocked.No one in your government knows anything about real security,wait I know lets hire a kid from Pakistan to fix our issues,cuz Canada fucked up the obama crap.

Eric

They’ll fix this when they get around to it because it is a veteran’s issue.

If it were welfare recipients information, they’d have it fixed in 2 hours by putting people on overtime, hiring 500 extra contractors and 3 new companies to fix the glitch.

Jabatam

I’m not sure what Lifelock costs but Identity Guard provides what seems like a pretty equivalent service for about $16/month…FYI

jim strieter

Why should the individual be required to pay $$ to protect their selves from credit harm. Simple solution would be for the SS # not be the sole source of identification. Law suites against Equifax and the others for false credit approval should also be a class action. Who is with me?