Ex-DHS chief confirms suspected Russian hackers targeted his email account

“If they have the ability to do that, what else did they have the ability to do?" Chad Wolf wondered on Monday.

Former acting Homeland Security Secretary Chad Wolf on Monday confirmed news reports that the suspected Russian spies behind a multi-prong breach of federal networks had targeted his email account while in office.

“The fact that they got my email and knew that I was running late to meetings or I had a schedule change [was] not that big of a deal at the end of the day, but the overall access was,” Wolf said during a webinar hosted by the Heritage Foundation.

“If they have the ability to do that, what else did they have the ability to do? Or what else did we not have insight into?” added Wolf, who served as President Donald Trump’s last Homeland Security secretary before stepping down in January.

Wolf’s comments come after the Associated Press reported on March 29 that the suspected Russian hackers had accessed his email account and those of some Department of Homeland Security cybersecurity staffers. The attackers exploited software made by contractor SolarWinds, among other vendors, on their way to breaching at least nine U.S. federal agencies and about 100 companies, the White House has said. The breaches have prompted the Biden administration to call for more federal cybersecurity resources.

Wolf’s remarks on Monday underscored how little the federal government knew of the alleged Russian operation when it first came to light. Private firms — FireEye and Microsoft — and not intelligence agencies first alerted U.S. officials of the breaches.  

“There were a lot of unknowns at the time,” Wolf recalled. “A lot of the information we know now, we did not know then.”

As the days passed after DHS first learned of the incident, he added, the department’s Cybersecurity and Infrastructure Security Agency determined that a “number of specific offices,” including the DHS front office, were targeted.

U.S. officials said in January that the hacking campaign is “likely Russian in origin.” U.S. officials have indicated that more details on who carried out the activity would be made public, but it’s unclear when. Moscow has denied involvement.

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

• Jail time for Maine child in 764 marks turning point in federal law enforcement

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure