Hackers may be sitting on a massive trove of government credentials — including emails and passwords tied to the White House, State Department, Department of Defense, and U.S. Army — according to new research[1] from NordVPN’s affiliate companies, NordPass and NordStellar.

The study found more than 53,000 passwords belonging to U.S. government employees exposed in publicly accessible databases and dark-web forums since early 2024. Among the most affected institutions include:

  • Department of State – 15,272 exposed passwords
  • Department of War (Defense) – 1,897 exposed passwords
  • U.S. Army – 1,706 exposed passwords
  • White House – Seven compromised passwords

One of the most commonly found passwords was “April@4142.” Researchers said it was the most widespread credential used by American civil servants.

“Exposure of sensitive data, including passwords of civil servants, is particularly dangerous,” Karolis Arbačiauskas, head of product at NordPass, said in a press release. “Such incidents may also pose serious risks to a country’s strategic interests.”

Leaked Passwords Reveal Wider Vulnerability

The research used NordStellar’s threat exposure management platform to analyze data from more than 5,500 government and municipal organizations across six countries, including the U.S., U.K., and Germany. It found that federal and local agencies alike remain vulnerable — from the Department of Veterans Affairs to state and city governments such as Illinois, Michigan, Utah, and Virginia Beach.

In total, NordPass identified 2,241 unique passwords among the 53,070 records, suggesting that many were reused across multiple accounts—or by multiple users—a known cybersecurity red flag.

“You can have state-of-the-art firewalls and zero-trust systems,” Marijus Briedis, chief technology officer at NordVPN, told Military.com. “But if employees reuse passwords, it defeats the purpose.”

The research also found passwords linked to NASA, the CIA, and the Government of the District of Columbia, further underscoring the exposure of government-affiliated credentials beyond traditional defense and diplomatic agencies.

U.S. Agencies Respond

A Department of State official told Military.com that the department has no record of receiving a notification from NordVPN regarding the reported exposure.

However, a State Department spokesperson said, “State is committed to cybersecurity across the department and we have instituted MFA (multi-factor authentication) and regularly rotate credentials to strengthen our safeguards against potential threats.”

A Department of Defense spokesperson referred Military.com to the U.S. Department of the Army for comment.

Military.com reached out to the Army as well as the White House for comment.

Nord Security’s Broader Findings

NordPass emphasized that the number of leaked passwords doesn’t necessarily equate to weak internal defenses.

“Larger organizations, with more employees, naturally have a bigger digital footprint,” Arbačiauskas said. “Sometimes a single malware infection on a personal device or the compromise of a popular third-party site can expose dozens of accounts.”

The company added that many of the breaches did not originate from government servers, but rather from employees using work emails to register on external websites—such as retail or cloud services—which were later breached.

NordPass Recommendations

To help mitigate risks, NordPass outlined several security recommendations for public agencies.

They include using long, unique passwords (of at least 20 characters, or multi-word passphrases); never reusing credentials between personal and professional accounts; implementing organization-wide password policies and breach scanners; and enforcing MFA for all internal and external systems.

The Password Problem Money Can’t Fix

Even as federal agencies invest billions in zero-trust architecture and advanced cyber defenses, researchers say one of the biggest weaknesses remains human behavior.

Every reused password or neglected update provides an opening for threat actors, and even one compromised credential can cascade into a high-level breach.

“You may not always defend against an attacker’s tools,” Briedis said, “but you can defend against your own mistakes.”

© Copyright 2025 Military.com. All rights reserved. This article may not be republished, rebroadcast, rewritten or otherwise distributed without written permission. To reprint or license this article or any content from Military.com, please submit your request here[2].

Read more

This is a key question and impacts innovation in the military.  The problem centers on two overlapping frameworks: military rules and federal patent law. Each branch of the armed forces has policies, like Army Regulation 27-60 and Air Force Instruction 51-301, regarding reporting inventions made by service members while on duty. Nearly always, the government claims ownership or more than a free of charge license to inventions related to military work.

Over it all is the Invention Secrecy Act of 1951, which establishes a federal right to impose secrecy orders on patent applications considered crucial to national security. Based on Patent and Trademark Office information, over 5,000 secrecy orders[1] will be in effect yearly, many regarding defense technologies. When an order is enforced, inventors may be barred from disclosing or profiting from their work - sometimes indefinitely.

For military inventors, this might mean a device they developed in a motor pool, a prison, or perhaps a forward operating base finds its way to some classified program without compensation or recognition.

Lt. Col. Kyle Schriefer, commander of Headquarters and Headquarters Battalion, 82nd Airborne Division, and Ms. Gihan Oraby, principal deputy director of Army Research Lab, Development Command, listen and take notes while Paratroopers present their inventions during Innovation Drop Zone 4.0 at the Airborne Innovation Lab on Fort Bragg, North Carolina, April 15, 2025. The annual IDZ competition encourages and supports innovation aligned with the Division’s efforts. During the competition, five teams presented their problem statement, innovative solution, and prototypes. (U.S. Army photo by Pfc. Prim Hibbard, DVIDS).

Pressure Mounted on Capitol Hill

The problem has refocused Pentagon attention as it looks at emerging technologies including artificial intelligence, autonomous systems and cyber tools - places where junior enlisted soldiers and Guard members often bring crucial civil expertise. Members of the House Armed Services and Judiciary Committees have received testimony by military personnel and veterans that the military bureaucracy took their inventions with no acknowledgment.

One proposal considered would require the Department of War to establish a uniform inventor recognition program much like federal employee awards which assures official credit and sometimes cash for service members. Another would require yearly reporting on secrecy orders impacting service member inventions so it would be clear how frequently troops ideas are categorized from reach.

Supporters point out such reforms would be fair and would foster innovation from the ranks. "If we would like soldiers, sailors, Marines and airmen to think creatively about resolving issues, they must understand their work will not simply go right into a black box," one congressional adviser told Military.com  

U.S. Airmen assigned to the 307th Aircraft Maintenance Squadron field test the Pylon Loading Fixture at Barksdale Air Force Base, Louisiana Aug. 22, 2021. The PLF was invented by Master Sgt. John Slaughter, 307th Maintenance Group quality assurance chief inspector to create a safer and more efficient way to attach pylons to the B-52 Stratofortress (DVIDS).

Risks & Counterarguments

The Pentagon has typically resisted letting inventions loose due to national security and intellectual property concerns. Officials worry permitting way too many rights to individual inventors could bog down procurement programs or expose sensitive capabilities. The Defense Department also cites existing award programs, including the Military Outstanding Invention Awards given yearly by the Office of the Under Secretary of Defense for Research & Engineering, as evidence troops are recognized.

Critics counter that those programs are little known and seldom reach top innovators. They assert that with no adequate safeguards and rewards the military risks losing a wellspring of ideas at a moment when peer rivals like China are investing heavily in defense innovation[2].

In both chambers, lawmakers have questioned whether those rules discourage innovation. With the Pentagon frequently investing in solutions including artificial intelligence[3], autonomous systems and cyber tools, some fear troops may be not as likely to share ideas if incentives were eliminated.

Some proposals floated in recent hearings consist of requiring the War Department to establish a formal recognition program for troop inventors and requiring greater transparency regarding secrecy orders impacting service member patents. Advocates say such reforms would be fair to the inventors and might increase military readiness by permitting more first line innovation.

From the motor pool to the plane line, American service members invent. But the system governing their inventions hasn't kept pace with contemporary defense technology. Congress has a choice now: Keep the existing system, where recognition is intermittent and patents usually fade into secrecy, or update the rules to give service members credit and compensation when their ideas help the nation defend.

The answer might determine if the next big device or process invented in uniform ever sees daylight - and if the military will continue to reap the benefits of the ingenuity of those closest to the struggle.

© Copyright 2025 Military.com. All rights reserved. This article may not be republished, rebroadcast, rewritten or otherwise distributed without written permission. To reprint or license this article or any content from Military.com, please submit your request here[4].

Read more

China Diplomats Dating Banned

Associated Press | By ERIC TUCKER

Published

WASHINGTON (AP) — A senior adviser at the State Department and expert on Indian and South Asian affairs is accused by the Justice Department of printing out classified documents and storing more than 1,000 pages of highly sensitive government records in filing cabinets and trash bags at home.

Ashley Tellis, who has also worked as a contractor in the Defense Department’s Office of Net Assessment, was charged in federal court in Virginia with the unlawful retention of national defense information after FBI agents who searched his home over the weekend found what they said was a trove of records marked as classified at the secret and top secret levels.

He was ordered detained Tuesday pending a detention hearing next week. One of his lawyers, Deborah Curtis, told The Associated Press that “we look forward to the hearing, where we’ll be able to present evidence" but declined to comment further.

An FBI affidavit cites several instances over the last month in which Tellis is alleged to have printed on government computers, or asked a colleague to print, classified documents on topics including U.S. military aircraft capabilities. Surveillance video shows him on several occasions exiting the State Department and a Defense Department facility with a briefcase in which he was believed to have stashed the printed-out papers, according to court documents.

Tellis also met multiple times with Chinese government officials[1] in recent years, according to the affidavit. Tellis arrived to one 2022 dinner with a manila folder while the Chinese officials he was meeting with entered with a gift bag, the FBI says. The affidavit says Tellis did not appear to have the manila folder in his possession when he left the restaurant, but does not accuse him of providing any classified information during his meetings with the Chinese.

Tellis is a prominent foreign policy expert with a specialty in Indian and South Asian affairs. The Carnegie Endowment for International Peace lists him as a senior fellow and the Tata Chair for Strategic Affairs. He also served on the White House National Security Council staff under Republican President George W. Bush[2].

___

This story has been corrected to reflect that Tellis is an expert on Indian and South Asian affairs, not Indian and South affairs.

Military Headlines[3] Department of Defense - DoD[4] Aircraft[5] China[6]

© Copyright 2025 Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

Read more

President Donald Trump

WASHINGTON (AP) — President Donald Trump said Saturday that he has directed the Defense Department to use “all available funds” to ensure U.S. troops are paid[1] Wednesday despite the government shutdown[2], a short-term fix that will not apply to the hundreds of thousands of federal workers who have been furloughed.

Trump said in a social media post that he was acting because “our Brave Troops will miss the paychecks they are rightfully due on October 15th.”

The Republican president's directive removes one of the pressure points that could have forced Congress into action, likely ensuring that the shutdown — now in its 11th day and counting — extends into a third week and possibly beyond. But no similar action seems forthcoming for federal employees also working without pay while thousands are now being laid off[3] during the lapse in government operations. The White House budget office started the layoffs on Friday.

Trump blamed Democrats and said he was exercising his authority as commander in chief to direct Defense Secretary Pete Hegseth “to use all available funds to get our Troops PAID on October 15th.” The Republican president added, "We have identified funds to do this, and Secretary Hegseth will use them to PAY OUR TROOPS.”

U.S service members were in danger of not receiving their next paycheck on Wednesday after the government shut down on Oct. 1, the start of the federal budget cycle. The U.S. has about 1.3 million active-duty service members, and the prospect of troops going without pay has been a focal point when lawmakers on Capitol Hill have discussed the shutdown’s negative impact.

Trump did not say where he's getting the money, but a spokesperson for the White House Office of Management and Budget said Pentagon research and development funds would be tapped.

The Pentagon said it identified about $8 billion of unobligated research development testing and evaluation funds from the last fiscal year that will be used to issue the mid-month paychecks, “in the event the funding lapse continues past October 15th.”

Federal workers typically receive back pay after a shutdown ends, as now required by a law that Trump signed during his first term. He recently floated the idea of not making up the lost salaries.

It was unclear if the president’s directive applies to the U.S. Coast Guard, which is a branch of the U.S. Armed Forces but is overseen by the Department of Homeland Security during peacetime.

The nation’s third shutdown in 12 years[4] has again raised anxiety levels among service members and their families as those in uniform are working without pay. While they would receive back pay once the impasse ends, many military families live paycheck to paycheck.

During previous shutdowns, Congress passed legislation[5] to ensure that troops kept earning their salaries, but discussion of taking a similar step by lawmakers appeared to have fizzled out.

Asked earlier this week if he would support a bill to pay the troops, Trump said, “that probably will happen.”

“We’ll take care of it,” he said Wednesday. “Our military is always going to be taken care of.”

The shutdown began on Oct. 1 after Democrats rejected a short-term funding fix and demanded that the bill include an extension of federal subsidies for health insurance under the Affordable Care Act. The expiration of those subsidies at the end of the year will result in monthly cost increases for millions of people.

Trump and Republican leaders have said they are open to negotiations on the health subsidies, but insist the government must reopen first.

Both sides appear dug in on their positions, making it unclear when, or how, the shutdown ends.

___

Associated Press writer Konstantin Toropin contributed to this report.

© Copyright 2025 Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

Read more

More Articles …