Kristi Noem fires FEMA’s 24 IT staff after massive cybersecurity breach

Homeland Security Secretary Kristi Noem has taken a dramatic step by firing more than two dozen staff members at the Federal Emergency Management Agency (FEMA). The action followed a major cybersecurity breach in which a “threat actor” gained access to FEMA’s computer network.

Cybersecurity Breach Triggers Mass Firings

A review of the agency’s systems revealed serious failures. According to Noem, FEMA’s career IT leadership failed to protect sensitive data and allowed prohibited legacy protocols to remain in use. The review also showed that FEMA did not use multi-factor authentication, leaving its systems exposed.

Noem said in a press release that the breach was far more serious than many inside FEMA admitted. She accused entrenched bureaucrats of trying to prevent Homeland Security from fixing the problem and of downplaying the threat.

Those fired included FEMA’s Chief Information Officer, Chief Information Security Officer, and 22 other IT employees. Noem described them as individuals who were more focused on covering up their failures than protecting the Homeland and American citizens’ data.

The identity of the cybercriminal behind the breach has not been revealed. FEMA and the Department of Homeland Security have not responded to requests for further information.

Internal Turmoil Within FEMA

This sweeping action by Noem comes at a time when FEMA is already under heavy criticism. The agency has been facing turbulence over leadership changes, poor management, and growing frustration among its staff.

Nearly 200 current and former FEMA employees wrote to Congress earlier this week, warning that the agency is being dangerously mismanaged. They claimed that the current leadership is rolling back vital protections meant to prevent failures during disasters.

Shortly after the letter was revealed, several FEMA employees were placed on leave, adding to tensions inside the agency.

How Cyber Attacks on Industrial Control Systems Can Endanger Lives ?

Leadership changes have caused controversy. In May, Noem fired the acting FEMA administrator. He had opposed budget cuts to the agency just one day earlier. His removal alarmed many people. They feared FEMA leadership was being reshaped to silence dissent. They also worried it was not meant to improve performance.

His replacement soon drew criticism after saying he did not know the United States had a hurricane season. While officials later insisted the comment was a joke, critics pointed to it as an example of how unprepared FEMA leadership had become.

Noem’s move to fire dozens of FEMA IT staff now adds another layer of instability, as cybersecurity is a crucial element of the agency’s ability to function effectively.

FEMA Under Fire for Disaster Response Failures

The latest crisis under Noem’s leadership also comes on the heels of criticism over FEMA’s disaster response efforts. Recently, the agency was faulted for its handling of deadly floods in Texas that killed more than 135 people.

Reports showed that an Urban Search and Rescue team prepared to deploy but waited several days because Noem required personal approval for expenditures over $100,000. Survivors of the floods and state officials said the delay cost valuable time and may have worsened the tragedy.

2.5 Billion Gmail Users on Alert as Google Issues Urgent Security Warning

FEMA’s reputation is already under strain. President Trump once proposed cutting back the agency’s role. Since then, FEMA has faced budget cuts and changes in leadership. It has also faced claims of political interference. Noem’s management has added more debate. Many now question if the agency can handle national emergencies well.

With this move, Noem tried to show she wants accountability for FEMA’s failures. She fired top IT staff and many others. This action has raised concerns. People now worry if the agency can work properly in an emergency while facing so much internal trouble.

As of now, the threat actor behind the breach remains unknown. FEMA continues to face public scrutiny not only for cybersecurity weaknesses but also for repeated lapses in disaster response. With Kristi Noem at the center of the controversy, the agency is navigating one of the most turbulent times in its history.

Renuka Bangale
Renuka Bangale
Renuka is a distinguished Chartered Accountant and a Certified Digital Threats Analyst from Riskpro, renowned for her expertise in cybersecurity. With a deep understanding of cybercrimes, malware, cyber warfare, and espionage, she has established herself as an authority in the field. Renuka combines her financial acumen with advanced knowledge of digital threats to provide unparalleled insights into the evolving landscape of information security. Her analytical prowess enables her to dissect complex cyber incidents, offering clarity on risks and mitigation strategies. As a key contributor to Newsinterpretation’s information security category, Renuka delivers authoritative articles that educate and inform readers about emerging threats and best practices.

TOP 10 TRENDING ON NEWSINTERPRETATION

Cyber Attacks on Space Infrastructure: Satellites, GPS and the Ground Systems Behind Them

From the Viasat KA-SAT hack to GPS jamming over the Baltic, a research guide to how attackers target satellites, navigation signals and ground stations, and why it matters on Earth.

How AI Agents Are Used in Cyber Attacks: From Assisted Hacking to AI-Orchestrated Espionage

Attackers now use AI agents to scan networks, write exploits and run extortion campaigns. A research guide to documented cases, including the first reported AI-orchestrated espionage campaign, and what defenders should do.

Cyber Attacks on AI and LLMs: How Attackers Target Large Language Models

Prompt injection, data poisoning, model theft and jailbreaks: a research guide to how attackers target AI systems and large language models, with real cases and defences.

French Supermarket Refrigeration Cyberattack: How Hacking the Cold Chain Can Endanger Lives

In October 2026 attackers heated refrigeration cabinets in hundreds of French supermarkets to as much as 50°C. No one was hurt, but the attack shows how hacking the cold chain can endanger lives through fire, food poisoning and spoiled medicines.

Cyberattacks on Nuclear Facilities: Stuxnet, Kudankulam and the Limits of Air Gaps

Stuxnet, the Davis-Besse worm and malware at India’s Kudankulam plant: what they show about cyber risk at nuclear facilities and the limits of air gaps.

Triton: When Hackers Target the Safety Systems That Prevent Industrial Disasters

The 2017 Triton attack targeted the safety systems that prevent industrial disasters. What happened, who was charged, and how plants protect their last line of defence.

Cybersecurity Risks in Smart Cities: When Connected Infrastructure Fails

How connecting traffic control, emergency alerts and utilities concentrates cyber risk in cities, what the Dallas and Atlanta incidents showed, and what governments recommend.

Weaponized Drones: Hijacking, GPS Spoofing and Emerging Cyber Warfare Risks

How drones can be hijacked, jammed or misled by GPS spoofing, what researchers have demonstrated, and why governments treat drone fleets as a security risk.

Ransomware Attacks on Hospitals: How Healthcare Cyberattacks Put Patients at Risk

How ransomware against hospitals and their suppliers delays care and endangers patients, what the Düsseldorf and WannaCry cases show, and what research says about deaths.

Operational blunder exposes massive Russian cyber espionage attack on Ukrainian prosecutors

A major cyberattack has compromised the email accounts of...

Cyber Attacks on Space Infrastructure: Satellites, GPS and the Ground Systems Behind Them

From the Viasat KA-SAT hack to GPS jamming over the Baltic, a research guide to how attackers target satellites, navigation signals and ground stations, and why it matters on Earth.

French Supermarket Refrigeration Cyberattack: How Hacking the Cold Chain Can Endanger Lives

In October 2026 attackers heated refrigeration cabinets in hundreds of French supermarkets to as much as 50°C. No one was hurt, but the attack shows how hacking the cold chain can endanger lives through fire, food poisoning and spoiled medicines.

Cyberattacks on Nuclear Facilities: Stuxnet, Kudankulam and the Limits of Air Gaps

Stuxnet, the Davis-Besse worm and malware at India’s Kudankulam plant: what they show about cyber risk at nuclear facilities and the limits of air gaps.

Triton: When Hackers Target the Safety Systems That Prevent Industrial Disasters

The 2017 Triton attack targeted the safety systems that prevent industrial disasters. What happened, who was charged, and how plants protect their last line of defence.

Cybersecurity Risks in Smart Cities: When Connected Infrastructure Fails

How connecting traffic control, emergency alerts and utilities concentrates cyber risk in cities, what the Dallas and Atlanta incidents showed, and what governments recommend.

Ransomware Attacks on Hospitals: How Healthcare Cyberattacks Put Patients at Risk

How ransomware against hospitals and their suppliers delays care and endangers patients, what the Düsseldorf and WannaCry cases show, and what research says about deaths.

FBI warns of AVrecon malware targeting outdated routers linked to proxy based cybercrime

A serious cybersecurity warning has been issued regarding commonly...

Related Articles

Popular Categories