Suspected Russian hackers stole thousands of State Department officials’ emails last year, according to two Congressional sources familiar with the intrusion, in the second known Kremlin-backed breach on the department’s email server in under a decade, writes Politico.
“The hackers accessed emails in the department’s Bureau of European and Eurasian Affairs and Bureau of East Asian and Pacific Affairs, the congressional sources said. It does not appear at this point that the classified network was accessed, a third official said.
It is not clear whether the theft of State Department emails was part of the SolarWinds espionage campaign, in which Russian hackers burrowed into federal and private sector networks by exploiting a piece of software - developed by the IT company SolarWinds - that is used across the government and private sector. The State Department used SolarWinds software and was exposed in that breach, according to The Washington Post.
This specific incident has not been previously reported.
In response to questions about the hack, a State Department spokesperson said in a statement that “the Department takes seriously its responsibility to safeguard its information and continuously takes steps to ensure information is protected. For security reasons, we are not in a position to discuss the nature or scope of any alleged cybersecurity incidents at this time”, - writes the author.