Pentagon Investigates Dialog Data Exposure of National Security Officials
Original: The Pentagon Is Looking Into the Dialog Data Exposure for Unmasking National Security Officials
Why This Matters
Exposure of national security personnel data poses significant operational and counterintelligence risks, as foreign intelligence services target such information.
A data exposure at Dialog, a private events group cofounded by Peter Thiel, compromised personal information of 222 registrants including a White House National Security Council official and an active-duty special operations intelligence officer. The Pentagon is now investigating the incident.
Dialog, a private events group cofounded by Peter Thiel, experienced a data exposure affecting 222 event registrants, including multiple US national security personnel. The compromised data included a senior National Security Council (NSC) intelligence official advising President Donald Trump and the national security adviser on sensitive intelligence programs, as well as an active-duty intelligence officer embedded with a Tier 1 special operations unit. Both officials were new registrants for Dialog's August retreat near Dublin, Ireland. The exposure resulted from a misconfigured website that allowed anyone to create an account, log in, and access files by loading the group's app landing page. Dialog internally characterized the incident as a cyberattack, but evidence indicates it stemmed from the organization's own website misconfiguration rather than external attack. The exposure was discovered by Swiss DJ and cybersecurity researcher maia arson crimew. The compromised files contained personal details including dates of birth, home addresses, mobile numbers, headshot photos, and private authentication tokens. The Pentagon is examining the matter, and the White House requested WIRED not name the NSC official on national security grounds. The duration of the data accessibility and the identity of other potential accessors remain unclear. Dialog's outside counsel demanded WIRED return its copy of the data, characterizing it as stolen, but WIRED declined.