Bomgar serves 12 of the 15 Departments of the U.S. Federal Executive Branch and 11 of 21 U.S. National Laboratories.

Dircks believes VPNs are attractive targets for hackers because they carry sensitive information over insecure networks and often provide full access into an internal network. Compromising that VPN remote access method means the hacker also has full access to the internal network.

“When an organization's only response to control access is by significantly restricting it, it negatively impacts productivity and operations,” Dircks said. “In this new paradigm, security teams need to be proactively controlling and monitoring access to critical systems from internal and external privileged users.”

This includes managing which sensitive systems they have access to and when, receiving real-time access notifications, monitoring activity, and capturing an unalterable audit trail and recordings of activity for later forensic use.

Dircks stated that while the exact intentions of this hack are not known, the Office of Personnel Management breach is likely the work of the same group and the nation-state responsible for the breaches at Anthem and Primera.

“Clearly, with sensitive information such as names, Social Security numbers, and other personal identifying information from federal employees in play, their usage in social engineering schemes or blackmail is quite obvious,” he said. “These state-sponsored hacking groups are so nefariously clever and well-funded, what really worries me is the not so immediately obvious outcomes these cybercriminals hope to achieve.”

In July 2014, U.S. Treasury Secretary Jacob J. Lew urged financial institutions and firms to take critical steps to better protect consumers and strengthen the nation's defenses against cybersecurity thefts, disruptions and attacks. Specifically, he called on the U.S. financial sector to improve cybersecurity by using the administration's new cybersecurity framework for their systems and as a way to evaluate outside vendors.

Secretary Lew called on financial firms to implement the NIST Framework for Improving Critical Infrastructure Cybersecurity. This framework, released in February 2014, provides a blueprint to evaluate, maintain and improve the resiliency of their computer systems.

“The consequences of cyber incidents are serious,” Lew said in his remarks. “When credit card data is stolen, it disturbs lives and damages consumer confidence. Successful attacks on our financial system would compromise market confidence, jeopardize the integrity of data and pose a threat to financial stability.”

Whether the OPM-hacked systems used a NIST framework has not yet been revealed.