Overview:
The Navajo Nation is investigating a potential data breach after a USB flash drive containing sensitive records belonging to Navajo veterans was discovered at a Farmington, New Mexico, laundromat. The records reportedly include Social Security information, DD-214s, identification documents, W-9 forms, financial assistance applications and direct-deposit information.
The Navajo Nation has taken steps to secure a USB flash drive reportedly containing confidential records belonging to Navajo veterans after concerns about a potential data breach were raised during a Monday meeting of the Legislative Branch’s Health, Education and Human Services Committee.
On Tuesday, Legislative Branch Chief Legal Counsel G. Michelle Espino, Esq., arranged for the USB drive to be secured by the Farmington Office of the Federal Bureau of Investigation (FBI).
The action followed a report by newly appointed Navajo Nation Veterans Advisory Council Commander Ryan Benally during Monday’s regular meeting of the Health, Education and Human Services Committee (HEHSC).
According to testimony presented to the committee, the flash drive was discovered at a Farmington laundromat by a Navajo veteran. The device reportedly contained sensitive personal and financial records belonging to Navajo veterans.
Among the records reportedly found on the drive were Social Security information, DD-214 military discharge records, identification documents, W-9 forms, financial assistance applications, direct-deposit information and other personally identifiable information.
The veteran who discovered the flash drive has remained anonymous because of concerns about possible retaliation. According to the information presented to the committee, the veteran initially notified the Office of the President and Vice President and the Navajo Nation Veterans Administration but had not received a response as of Monday’s meeting.
The veteran subsequently contacted Shiprock Veterans Organization Commander Demetria Simms, who brought the matter to the attention of HEHSC Chair Vince R. James.
James then asked Benally to provide the committee with an update regarding the flash drive.
“The protection of our veterans’ confidential information has to be treated as a priority,” James said. “These veterans entrusted their government with personal records, and we have a responsibility to determine what happened, who was responsible and what steps are necessary to protect every veteran who may have been affected.”
Following the report, James directed Espino to coordinate with the FBI to secure the flash drive and help mitigate potential risks to Navajo veterans whose confidential information may be stored on the device.
Navajo Nation Council Speaker Crystalyne Curley said the Council has a responsibility to protect the privacy of veterans and ensure the matter receives appropriate scrutiny.
“The Navajo Nation Council has taken action to protect the privacy and trust of our veterans,” Curley said. “Given the nature and apparent scope of the information involved, this potential data breach requires prompt and serious attention. We must ensure the appropriate authorities determine what happened, assess the potential impact and take the necessary steps to protect veterans whose confidential information may have been compromised.”
The circumstances surrounding how the USB drive came to contain the records remain unclear. Authorities are expected to determine the nature and extent of the information on the device, how it came to be in a Farmington laundromat and whether confidential veterans’ records were improperly accessed, disclosed or otherwise exposed.
The matter remains under review as appropriate authorities assess the potential exposure of Navajo veterans’ confidential information.
