Overview

• The General Services Administration (GSA) improperly shared Google Drive files containing controlled unclassified information (CUI) with more than 11,200 employees, including White House blueprints.
• The security lapse, spanning both the Biden and Trump administrations, was discovered last week during a GSA Office of Inspector General audit.
• Nine of the 15 shared files were marked as CUI, with at least ten allowing users to edit sensitive content, such as blast door designs and vendor banking details.
• The GSA IT team revoked access to the files within days and continues to investigate the root causes of the misconfigurations.
• Experts highlight systemic issues in government cloud security, with human error and outdated practices undermining existing safeguards like automated scans and annual training.