US unravelling hack of nine govt agencies
Task force is investigating the extent of the damage
This is a sophisticated actor who did their best to hide their tracks. We believe it took them months to plan and execute this compromise. It will take us some time to uncover this layer by layer
Washington, Feb. 18: US authorities are still working to unravel the full scope of the likely Russian hack that gave the “sophisticated” actor behind the breach complete access to files and email from at least nine government agencies and about 100 private companies, the top White House cybersecurity official said Wednesday.
Anne Neuberger, the newly appointed deputy national security adviser for cyber and emerging technology, also warned that the danger has not passed because the hackers breached networks of technology companies whose products could be used to launch additional intrusions. A task force is investigating the extent of the damage from the breach, assessing potential responses and trying to confirm the identity of whoever was behind it — a process Neuberger warned will take more time.
“This is a sophisticated actor who did their best to hide their tracks,” she told reporters at the White House. "We believe it took them months to plan and execute this compromise. It will take us some time to uncover this layer by layer.” US authorities have said the breach, first disclosed in December, appeared to be the work of
Russian hackers.
Neuberger, a former senior official at the National Security Agency who was appointed by President Joe Biden this month, went no further. “An advanced, persistent threat actor likely of Russian origin was responsible," she said, without providing any details on the potential responses. The Russian government has denied involvement. Private security company FireEye was first to publicly identify the breach, revealing that hackers had hijacked widely used network software from SolarWinds Inc. to install malicious software through a routine security update.
Intelligence agencies did not detect the breach because they largely have "no visibility into privatesector networks," and it was launched within the US, Neuberger said. She said the Biden administration supports changes to “culture and authorities” that prevented the hack from being detected on the federal civilian systems.
The hack, Neuberger said, highlights the need to modernize the nation's IT infrastructure and its cyber defences, issues that will be addressed in an upcoming executive order. Several agencies have acknowledged that they were breached, including the Treasury Department and Justice Department, but the full list has not been publicly released. Once inside, the hackers had full access to the victims' data.
“The techniques that were used lead us to believe that any files or emails on a compromised network were likely to be compromised," Neuberger said.
— ANNE NEUBERGER Deputy national security adviser for cyber and emerging technology