Security Breach: Confidential CBP Information Exposed on Quizlet

In February 2023, a public flashcard set titled “USBP Review” was created on Quizlet, an online learning platform, potentially exposing sensitive security information related to U.S. Customs and Border Protection (CBP) facilities in Kingsville, Texas. The flashcard set included specific codes for facility entrances, raising concerns about security breaches within the agency. The set was made private on March 20, shortly after WIRED contacted a phone number linked to the user.

Wired Magazine

The U.S. Customs and Border Protection is tasked with safeguarding the American homeland, which includes managing security protocols at various facilities. Any breach of confidential information could undermine the agency's ability to perform its duties effectively.

Wired Magazine

The Quizlet flashcard set contained explicit details, including four-digit codes for specific facility entrances. For instance, one card queried about a "checkpoint doors code," providing a precise combination in response. This level of detail, if linked to an active CBP agent or contractor, represents a significant lapse in security protocols.

Wired Magazine

A spokesperson for CBP confirmed that the incident is under review by the agency's Office of Professional Responsibility. The spokesperson emphasized, “We will not be getting ahead of this review. A review should not be taken as an indication of wrongdoing.” However, the Department of Homeland Security and Immigration and Customs Enforcement did not respond to inquiries regarding the incident.

Wired Magazine

The exposure of such sensitive information has raised alarms among security experts and critics of the agency. If the flashcard set was indeed created by someone affiliated with CBP, it highlights potential vulnerabilities in the agency's training and information dissemination processes. Critics argue that this incident could jeopardize the safety of both CBP personnel and the public.

Wired Magazine

While the flashcard set has been linked to a user whose name corresponds to an address near a Kingsville CBP facility, WIRED has not confirmed whether the creator is an active CBP employee or contractor. This uncertainty leaves gaps in understanding the full implications of the breach.

Wired Magazine

The ongoing review by CBP's Office of Professional Responsibility will likely determine the next steps regarding accountability and potential policy changes to prevent future breaches. The outcome of this review could have significant implications for the agency's operational security and training protocols.

Wired Magazine

• “This incident is being reviewed by CBP’s Office of Professional Responsibility,” — CBP Spokesperson

Wired Magazine

• “We will not be getting ahead of this review. A review should not be taken as an indication of wrongdoing.” — CBP Spokesperson

Wired Magazine