$19 million is the estimated cost of notifications and credit monitoring for affected employees, according to OPM director Katherine Archuleta, It’s not clear to me if she based that figure on the original 4.2M affected figure or a newer 18M estimate. And it doesn’t include notifications or credit monitoring for family members or others whose information was exposed in the employees’ files.
So expect the $19M figure to go up.
And up.
And then add in more forensics costs.
And more security upgrades.
And the cost of dealing with litigation.
And the cost in personnel time of dealing with this mess.
Yeah, this is a mess….