Reports released this week indicate the Russian government allegedly used Kaspersky antivirus software to search millions of computers around the world in order to steal highly sensitive U.S. government information

In a letter, Klobuchar requests details of the Department’s efforts to work with state officials to ensure election systems are not operating with Kaspersky software

WASHINGTON, DC – U.S. Senator Amy Klobuchar today urged the U.S. Department of Homeland Security to help states secure their election systems. The letter follows reports this week that indicate the Russian government allegedly used Kaspersky antivirus software to search millions of computers around the world in order to steal highly sensitive U.S. government information.  In a letter, Klobuchar requested details of the Department’s efforts to work with state officials to ensure election systems are not operating with Kaspersky software.

 
“As we continue to receive reports that the Kremlin may have accessed classified national security information through Kaspersky Lab software, it is imperative that we take all necessary steps to prevent future cyberattacks,” Klobuchar wrote. “The Department’s recent decision requiring all federal agencies to remove Kaspersky software from government computers is an important first step towards addressing the potential vulnerabilities our networks face. Now, we must also ensure that state and local government officials are aware of these threats and have the guidance and resources needed to remove Kaspersky software from their networks. This is especially necessary where officials maintain cyber networks related to critical infrastructure, like our election systems.”

In September, Klobuchar wrote a letter to the Department to request information on the use of Kaspersky Lab software on critical infrastructure, including election systems. Klobuchar also called on DHS to detail its efforts to work with state and local election officials to ensure that election cybersecurity software is effective and secure. Following the letter, the Department banned federal agencies from using computer software supplied by Kaspersky lab.

As Ranking Member of the Senate Rules Committee with oversight jurisdiction over federal elections, Klobuchar has introduced legislation to improve the security of U.S. election systems and make commonsense improvements to election administration. She and Senator Lindsey Graham (R-SC) introduced bipartisan legislation to help states block cyber-attacks, secure voter registration logs and voter data, upgrade election auditing procedures, and create secure and useful information sharing about threats. Klobuchar and Senator Roy Blunt (R-MO) have also introduced the bipartisan Stop Foreign Donations Affecting Our Elections Act to strengthen disclosure by requiring federal campaigns to use existing credit card verification protocols to help verify that online credit card donations come from U.S. sources. In June, Klobuchar introduced the Helping State and Local Governments Prevent Cyber Attacks Act to help combat foreign interference by providing state and local governments with the information and resources they need to keep our elections secure and improve voter confidence.

Klobuchar recently led Senate Rules Committee Democrats in a call for hearings and briefings on foreign attempts to hack into U.S. election systems and improving cyber security. Klobuchar also led a group of 26 senators in calling for a full account of the Election Assistance Commission’s (EAC) efforts to address Russian cybersecurity threats. In early January, Klobuchar introduced legislation with four other senators to create an independent, nonpartisan commission to comprehensively investigate Russian interference in the 2016 election.

The full text of the senator’s letter is below.

Dear Acting Secretary Duke:

I write to follow up on my September 13 letter urging the Department of Homeland Security to protect federal cyber networks against Kaspersky Lab software and to request that you work with state election officials to ensure their systems are also secure.  

Reports released this week indicate the Russian government allegedly used Kaspersky antivirus software to search millions of computers around the world in order to steal highly sensitive U.S. government information, including the code names of American intelligence programs and documents from National Security Agency employees.  As we continue to receive reports that the Kremlin may have accessed classified national security information through Kaspersky Lab software, it is imperative that we take all necessary steps to prevent future cyberattacks.

The Department’s recent decision requiring all federal agencies to remove Kaspersky software from government computers is an important first step towards addressing the potential vulnerabilities our networks face. Now, we must also ensure that state and local government officials are aware of these threats and have the guidance and resources needed to remove Kaspersky software from their networks. This is especially necessary where officials maintain cyber networks related to critical infrastructure, like our election systems.

Intelligence reports are clear that Russia used covert cyberattacks, espionage, and harmful propaganda to try to undermine our democracy and hurt U.S. businesses. In addition to hacking presidential campaign accounts from both parties, Russia launched cyberattacks against at least 21 state election systems, attacked a U.S. voting systems software company, and illegally obtained the emails of more than 100 local election officials.

Given recent revelations regarding how Russia used Kaspersky software to breach our systems, it is important to prioritize state critical infrastructure systems in conjunction with efforts currently underway at the federal level. 

The potential threat posed to our election infrastructure by the use of Kaspersky software appears to be significant and it is essential to ensure that future elections are safeguarded from foreign interference.

As Ranking Member of the Senate Rules Committee with jurisdiction over federal elections, I respectfully request a timely response detailing the Department’s efforts to work with state officials to ensure our election systems are not operating with Kaspersky software.

Thank you for your prompt attention to this request.

Sincerely,

###