Overview

• Noem said a DHS-ordered cybersecurity review found that a threat actor accessed FEMA’s network.
• She dismissed 23 IT employees, including Chief Information Officer Charles Armstrong and Chief Information Security Officer Gregory Edwards.
• DHS representatives alleged the team misled officials, avoided scheduled inspections, failed to use multi-factor authentication, and ignored critical vulnerabilities.
• A DHS spokesperson said DHS disabled the intruder’s credentials and that FEMA IT later re-enabled them.
• Noem stated that no American citizens were directly impacted and that no sensitive data was extracted from DHS networks.