White House blames Russian spy agency SVR for SolarWinds hack: statement

Reuters

Published Apr 15, 2021 10:05AM ET

Updated Apr 15, 2021 11:00AM ET

By Christopher Bing

(Reuters) -The White House said in a statement on Thursday that Russia's foreign intelligence service, known as the SVR, was responsible for the SolarWinds hack, which led to the compromise of nine federal agencies and hundreds of private sector companies.

Senior U.S. government officials had already said the Russian government was responsible for the sprawling cyber attack, but Thursday's announcement offers the first formal statement pinning the operation on a specific agency.

The White House statement was paired with a series of sanctions against five Russian cybersecurity firms, which the Treasury Department said had been involved in supporting Russian cyber operations.

While some national security experts say the SolarWinds hacking operation could be viewed as a traditional espionage activity that is not uncommon between government hackers, the Treasury Department in its statement said the "scope and scale of this compromise combined with Russia’s history of carrying out reckless and disruptive cyber operations makes it a national security concern."

The National Security Agency, FBI and Cybersecurity Infrastructure Security Agency also revealed on Thursday that the SVR was exploiting five known computer software vulnerabilities.