Watchdog finds 116 sensitive files exposed in GSA's Google Drive

The GSA's Office of Inspector General found 116 files with controlled unclassified information in the agency's Google Drive that were improperly shared with employees and contractors lacking a business need. Exposed data included Social Security numbers, vendor proposals and building site plans; GSA said nothing leaked externally and has taken corrective action.

• 116 CUI files were shared with staff and contractors without a need to know
• Exposed data included SSNs, vendor proposals and D.C. building site plans
• The DLP tool's search terms were not reviewed and OCR was not enabled
• GSA received seven recommendations and agreed to all of them