The Cybersecurity and Infrastructure Security Agency notified lawmakers on Friday that the recent breach of its chemical plant security tool that was linked to flawed Ivanti products potentially affected more than 100,000 individuals, triggering disclosure to Congress under a federal cybersecurity law. The size of the breach makes it a “major incident” under the threshold established by the Federal Information Security Management Act.

Source: Cyberscoop