Investigation Launched Into Massive Russian-Linked Hack Of U.S. Government

Multiple government agencies are investigating a massive cyberattack that compromised computer systems at numerous departments including, the Department of Homeland Security, the National Institute of Health, and the State, Commerce, and Treasury Departments.

The on-going investigation is being spearheaded by the FBI, with help from the Cybersecurity and Infrastructure Security Agency and the Office of the Director of National Intelligence.

"As the lead for threat response, the FBI is investigating and gathering intelligence in order to attribute, pursue, and disrupt the responsible threat actors. The FBI is engaging with known and suspected victims, and information gained through FBI's efforts will provide indicators to network defenders and intelligence to our government partners to enable further action," the agencies said in a joint statement.

Intelligence officials believe the cyberattack can be traced back to Russia, though the Kremlin has denied any involvement. The attackers reportedly found vulnerabilities in software from SolarWinds, which makes IT management tools, and installed malicious software that can be used to steal information and even manipulate the systems. 

SolarWinds said that at least 18,000 organizations may have downloaded the infected software. In addition to the government agencies that were breached, hackers also targeted over 400 Fortune 500 companies.

Senator Richard Blumenthal called the attack "stunning" in a tweet after receiving a classified briefing on the matter.

"Stunning. Today's classified briefing on Russia's cyberattack left me deeply alarmed, in fact downright scared. Americans deserve to know what's going on. Declassify what's known & unknown."

The damage caused by the cyberattack could take years to uncover, and former Trump administration Homeland Security Adviser Tom Bossert warned that Russian hackers may still have access to secure government systems.

"While the Russians did not have the time to gain complete control over every network they hacked, they most certainly did gain it over hundreds of them. It will take years to know for certain which networks the Russians control and which ones they just occupy," Bossert wrote in an op-ed for the New York Times. "The logical conclusion is that we must act as if the Russian government has control of all the networks it has penetrated. But it is unclear what the Russians intend to do next. The access the Russians now enjoy could be used for far more than simply spying."

Photo: Getty Images