Orion solarwinds deleted routes update#

There's a lot of sensitive information floating around the DOJ, given the large number of federal investigations and prosecutions it oversees. At this point, the number of potentially accessed O365 mailboxes appears limited to around 3-percent and we have no indication that any classified systems were impacted. This activity involved access to the DepartmentвЂ™s Microsoft O365 email environment.ДЄfter learning of the malicious activity, the OCIO eliminated the identified method by which the actor was accessing the O365 email environment. 24, 2020, the Department of JusticeвЂ™s Office of the Chief Information Officer (OCIO) learned of previously unknown malicious activity linked to the global SolarWinds incident that has affected multiple federal agencies and technology contractors, among others. That doesn't seem to jibe with the details of the statement, which says an email system used by damn near everyone was the target. The DOJ says it's been breached, but appears to believe the damage is minimal. The latest news adds a couple more federal agencies/operations to the list. The DHS, Department of Energy, and the National Nuclear Security Administration have also been breached. The Defense Department has also noted it's affected, although it has yet to deliver any specifics about the multitude of agencies it oversees.

This was followed by announcements of suspected breaches at the US Postal Service and the Department of Agriculture. The Department of Commerce was one of the first to discover a breach. The list of federal agencies affected by this advanced persistent threat continues to grow. Hours later, the entity warning other federal agencies about the hack announced it too had been hacked, making the whole thing a bit Monty Python-esque. The DHS's cyber wing, CISA, issued a warning about the hack, noting that the only solution was to air gap affected systems and delete the compromised Orion software. Here in the United States, a possible 18,000 Solarwinds customers are affectedвЂ¦ as are their users and customers, which brings the possible number of infected back up into the millions.

Orion solarwinds deleted routes update#

State-sponsored hackers - presumably Russian - leveraged Solarwinds' massive customer base and compromised update server to infect systems around the world. The hits just keep on coming for US federal agencies affected by the massive Solarwinds hack.