Cybersecurity

Russia-Linked SolarWinds Hack Snags Widening List of Victims

  • U.S. states, nuclear weapons agency systems breached
  • Software giant Microsoft says systems were exposed to malware
Microsoft Was Exposed to SolarWinds as Hack Widens
Lock
This article is for subscribers only.

It was clear from the start that a cyber attack by suspected Russian hackers aimed at several U.S. government agencies was going to be bad. One clue: National Security Advisor Robert O’Brien cut short a trip overseas early this week to rush back to Washington to help manage the crisis.

But on Thursday, the reality of just how sprawling -- and potentially damaging -- the breach might be came into sharper focus. It started with a bulletin from the U.S. Cybersecurity and Infrastructure Security Agency, known as CISA, warning that the hackers were sophisticated, patient and well-resourced, representing a “grave risk” to federal, state and local governments as well as critical infrastructure and the private sector. It didn’t take long to see how accurate the agency’s assessment was.