OPM Director Katherine Archuleta resigns in wake of massive data breach


Office of Personnel Management Director Katherine Archuleta is sworn in before testifying before the Senate about the OPM data breach. (Photo: Chip Somodevilla/Getty Images)

Katherine Archuleta, the director of the Office of Personnel Management, has resigned from her post amid a cascading scandal over her handling of a massive breach of federal employee data.

Archuleta, who has been at the helm of OPM since November 2013, submitted her resignation Friday morning.

OPM announced Thursday that the size of a hack that began last year led to the pilfering of sensitive personal information of 21.5 million former and current employees. That admission, following weeks of scrutiny on Capitol Hill after OPM acknowledge a separate data breach that affected 4.2 million, led to a rush of lawmakers who called for her ousting, including the top three House Republicans and Democratic Sen. Mark Warner, who sits on the Senate Intelligence Committee.

Beth Cobert, the deputy director for management at the Office of Management and Budget, will take over Archuleta’s job, OMB said.

“Today I informed the OPM workforce that I am stepping down as the leader of this remarkable agency and the remarkable people who work for it,” Archuleta said in a statement. “This morning, I offered, and the President accepted, my resignation as the Director of the Office of Personnel Management. I conveyed to the President that I believe it is best for me to step aside and allow new leadership to step in, enabling the agency to move beyond the current challenges and allowing the employees at OPM to continue their important work.”

The data breach compromised 19.7 million individuals’ Social Security numbers, and the remainder of the affected individuals—1.8 million people—were family and friends. In addition to Social Security numbers, the stolen information included employment history, financial and health history, addresses, and even fingerprints. The hack announced Thursday occurred at roughly the same time as another hack, which OPM announced in June. That data breach affected 4.2 million current and former federal workers, 3.6 million of whom were also affected by the larger breach.

Archuleta had remained resolute in the face of withering scrutiny, and the White House had expressed support for her as recently as Thursday. When asked on a press call if she would step down, Archuleta said “no” and credited her agency with improving its cybersecurity since she had taken over.

“It is because the efforts of OPM and its staff that we’ve been able to identify the breaches,” Archuleta said.

Archuleta served as a national political director for President Obama’s reelection campaign. Former Florida Gov. Jeb Bush, a GOP candidate for the White House, had taken to referring to her as a “political hack” who needed to be removed.

Warner, who represents thousands of federal workers who live in Northern Virginia, said Friday, “This is the right move for the agency and all those affected by the breach.”

Rep. Adam Schiff, the top Democrat on the House Intelligence Committee, said Archuleta’s removal was the “right decision, and one that will help to restore confidence in an agency that not only poorly defended sensitive data of millions of Americans but struggled to respond to repeated intrusions.”

“This change in leadership is also an acknowledgement that we cannot simply place blame on the hackers, but need to take responsibility for the protection of personal information that is so obvious a target,” Schiff added.

OPM said Thursday it would notify the 21.5 million individuals affected by the larger hack, and offer them at least three years of comprehensive credit monitoring and fraud protection services at no cost. But the agency does not yet have a contractor in place to provide the services.

More from National Journal: