EEOC experienced security incident involving an Opexus employee’s ‘unauthorized’ access, email says

According to NextGov/FCW, the Equal Employment Opportunity Commission experienced an internal data security incident that involved a contractor’s employees with privileged access, who handled data in an unauthorized and prohibited manner in early 2025. The breach occurred in the EEOC’s Public Portal system and may have exposed employees’ personally identifiable information; the EEOC’s data security office sent a notification about the incident on 18 December 2025.

The agency said it took immediate steps to secure its systems and began an assessment to determine the nature and scope of the incident. The notification was obtained by NextGov/FCW, which reported that the contractor’s staff mishandled sensitive information in the system. The incident is categorised by DataBreaches[.]Net as Insider and Subcontractor, highlighting the involvement of a contractor’s personnel in unauthorised access.