[News](/news) U.S Government cyber attack largest breach in the nation's history [Blog](/blog)[Breaches](/breaches)[Resources](/resources)[News](/news) # U.S Government cyber attack largest breach in the nation's history ##### [Edward Kost](/team/edward-kost) December 21, 2020 The [recent cyber attack against the US Government](https://www.upguard.com/news/u-s-treasury-emails-breached) is the largest breach in the nation’s security industry. Investigations will continue deep into 2021. It will take at least that long to reverse engineer a cyber attack so sophisticated, even cybersecurity experts are shaking their heads in awe and disbelief. #### What happened? In March 2020, a malicious code was injected into the U.S government’s internal systems through an IT update from its network-monitoring vendor, SolarWinds. The attackers used a supply chain method of attack, where malicious code is introduced into a system [through a compromised third-party](https://www.upguard.com/product/vendorrisk).  The cyber attackers accessed the Microsoft Office 365 account of the National Telecommunications and Information Administration (NTIA), uncovering a swathe of internal communications between several federal agencies. #### What do we know? So far, it has been discovered that [six U.S Government departments](https://www.washingtonpost.com/business/technology/government-warns-new-hacking-tactics-russia/2020/12/17/bba43fd8-408c-11eb-a402-fba110db3b42_story.html) have been breached, including: * The Department of Energy * The National Nuclear Security Administration * The U.S Department of State * The U.S Department of Commerce * The U.S Department of the Treasury * The Department of Homeland Security [Microsoft President Brad Smith said](https://www.zdnet.com/article/microsoft-says-it-identified-40-victims-of-the-solarwinds-hack/) that 80% of the affected victims are located in the United States, with the remaining 20% spread across, Spain, Israel, United Kingdom, Belgium, and the United Arab Emirates. Thomas Rid, a Political Science Professor specializing in Cybersecurity issues, [described this attack](https://www.washingtonpost.com/technology/2020/12/14/russia-hack-us-government/) as “highly sophisticated” and “stealthy.” The benefit of such delicate clandestine attacks is that they don’t follow the classical cyber attack model of aggressive exfiltration. The sinister downside, however, is that such attacks tend to target specific information only.  #### What is speculated? Mounting evidence suggests that Russia was responsible for the attack, though the nation explicitly denies any involvement.  [Andrei Soldatov told the Guardian](https://www.theguardian.com/world/2020/dec/18/cyber-attack-brutal-reminder-russia-problem-facing-joe-biden?CMP=share_btn_tw) that the hack was most likely a joint effort between Russia’s foreign intelligence outfit SVR (the successor to the KGB), and FSB, the domestic spy agency Putin led before he became Prime Minister and President. FSB hackers, known as Cozy Bear or APT29 (Advanced Persistent Threat 29), were responsible for the Democratic National Committee breach in 2015. Jeremy Bash, former Chief of staff to the CIA and Department of Defence, confirmed this cyberattack contained APT29 signatures. The cyber attackers were very specific with the intelligence they penetrated. Investigations are slowly uncovering and mapping the digital tracks of the threat actors to discover the specific sectors they were targeting. Recent findings uncovered highly suspicious activity in the internal networks of the Federal Energy Regulatory Commission (FERC).  The FERC stores sensitive power grid displacement data across the United States. While the motivation behind this particular breach isn’t conclusive, this could have been a reconnaissance mission to plan a future disruption to the nation’s electricity network. Given the unfamiliar complexity of this cyberattack, at this point experts can only speculate the complete depth of compromised data. Microsoft described this attack as “remarkable for its scope”, a chilling foreboding of eventual investigation findings. ## How secure is SolarWinds? SolarWinds provides IT management and observability software for monitoring networks, applications, databases, and infrastructure across on-premises, cloud, and hybrid environments. The company offers solutions for incident response, IT service management, and database optimization. * View our free preliminary report on SolarWinds’s security posture * 13 risk factors, including email security, SSL, DNS health, open ports and common vulnerabilities [View SolarWinds's score](/security-report/solarwinds) [View score](/security-report/solarwinds) [https://www.solarwinds.com](/security-report/solarwinds) ### Sign up for our newsletter UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights. ## Latest news Stay up-to-date with the latest news in cybersecurity. [](/news/hugging-face-data-breach-2026-07-20) #### [Hugging Face data breach: key facts and what we know so far](/news/hugging-face-data-breach-2026-07-20) A data breach involving Hugging Face was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 20, 2026 [](/news/ey-data-breach-2026-07-19) #### [EY data breach: what happened and what's at risk](/news/ey-data-breach-2026-07-19) A data breach involving EY was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) #### [South Florida Injury & Convenient Care data breach exposes names and Social Security numbers](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) A data breach involving South Florida Injury & Convenient Care was reported in July 2026. See incident details, impact on customers, and security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/park-west-psychology-data-breach-2026-07-16) #### [Park West Psychology data breach: what happened and what's at risk](/news/park-west-psychology-data-breach-2026-07-16) A data breach involving Park West Psychology was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) #### [Fall River Municipal Credit Union data breach: what happened and what's at risk](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) A data breach involving Fall River Municipal Credit Union was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [](#) July 14, 2026 [](/news/npcil-data-breach-2026-07-16) #### [NPCIL data breach: World Leaks claims exposure of Kudankulam Nuclear Power Plant files](/news/npcil-data-breach-2026-07-16) A data breach involving NPCIL was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 14, 2026 [View all news](/news) ## Protect your organization Get in touch or book a free demo. [Contact sales](/demo) [Free demo](/demo) ##### Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](/instant-security-score)