Obama administration says a newly-created agency will conduct federal background checks, and DOD will store records, after internal review following OPM breach
Eric Yoder / Washington Post :
Context & Ripple Effects
This announcement closes an eight-month arc that began when OPM's own inspector general warned the agency its systems were vulnerable weeks before the breach surfaced. The fallout was immediate: OPM shut down the background-check system entirely for four to six weeks, then brought it back online with security tweaks by late July.
What changes today is structural rather than remedial: instead of patching the compromised system, the administration is stripping the mission out of OPM altogether — a newly created agency will conduct federal background investigations, and DOD will hold the records. The split separates who investigates from who stores, directly answering the single-point-of-failure problem the breach exposed.
First-order effects
- OPM loses the background-check mission it fumbled, transferring investigations to a new agency while DOD becomes custodian of the records that were breached on OPM's watch.
- Federal agencies hiring and clearing personnel now route vetting through a new intermediary mid-reorganization, inheriting whatever transition risk comes with moving the pipeline.
Second-order effects
- DOD's security posture effectively becomes the security perimeter for the entire federal workforce-vetting apparatus — any weakness there now exposes every agency's personnel files at once.
Third-order effects
- If the pattern holds, personnel-security data gets treated as national-security infrastructure rather than routine HR records, with custody concentrated in defense institutions and future breaches judged against that higher standard.
The trend: Major federal data breaches are triggering institutional restructuring — missions moved to new agencies and records shifted to DOD custody — rather than incremental security patches.