FBI Audit Finds Security Gaps at Key Facilities

Report highlights vulnerabilities at Huntsville and Pocatello data centers

Apr. 1, 2026 at 12:00am

A new audit of the Federal Bureau of Investigation's security controls, conducted pursuant to the Federal Information Security Modernization Act, has uncovered concerning gaps at two critical data facilities in Huntsville, Alabama and Pocatello, Idaho.

Why it matters

The FBI's data centers and IT infrastructure are vital to national security operations, so any vulnerabilities pose serious risks. This audit raises questions about the agency's ability to protect sensitive information and systems from potential breaches or disruptions.

The details

The audit found multiple issues with access controls, patch management, and other security measures at the Huntsville Main Distribution Frame and the Pocatello Data Center. Investigators noted outdated software, inadequate monitoring, and a lack of comprehensive security policies across the two facilities.

  • The audit was conducted in fiscal year 2025.

The players

Federal Bureau of Investigation

The FBI is the primary investigative arm of the United States Department of Justice, tasked with protecting the American people and upholding the Constitution.

Got photos? Submit your photos here. ›

What’s next

The Department of Justice has pledged to work with the FBI to address the security gaps identified in the audit and implement stronger safeguards at these critical data facilities.

The takeaway

This audit underscores the need for the FBI to bolster its cybersecurity measures and ensure its most sensitive data and systems are properly protected, especially at remote locations that could be vulnerable to attacks or disruptions.