A security services provider for the federal government is notifying employees, former employees and customers that its network was compromised by malware.