ILC agrees to pay $13 million over alleged cybersecurity contract failures
POLICYNASAredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
ILC Dover and ILC Astrospace agreed to pay $13 million under the False Claims Act over alleged non-compliance with federal contract cybersecurity requirements between 2018 and 2024. Alleged failures included storing sensitive data with a third-party cloud provider without adequate safeguards and not developing or updating required system security plans for covered information systems. Parent company Ingersoll Rand said it became aware after acquiring ILC Dover in June 2024 and was compliant by October 2024. Defenders with DFARS-covered contracts should verify cloud safeguards and current system security plans.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Contractors handling federal data should check that third-party cloud storage meets their contractual security requirements.
- Organisations with government contracts should confirm that security plans are current for all covered information systems.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
CyberScoop
Who and what is in it
Government agencies