Recent reports indicate that Kaspersky Lab has maintained a relationship with Russia’s intelligence agency; Currently, Kaspersky Lab software is used by millions of Americans and the U.S. federal government   

In a letter to DHS Acting Secretary Elaine Duke, Klobuchar requests information on the use of Kaspersky Lab software on critical infrastructure, including election systems; Klobuchar also called on DHS to detail its efforts to work with state and local election officials to ensure that election cybersecurity software is effective and secure

WASHINGTON, DC – U.S. Senator Amy Klobuchar, Ranking Member of the Senate Rules Committee, has asked the U.S. Department of Homeland Security (DHS) for information regarding U.S. government use of Moscow-based cyber security firm Kaspersky Lab. Recent reports indicate that Kaspersky Lab has maintained a relationship with Russia’s intelligence agency, the FSB. Kaspersky Lab software is used by millions of Americans and the U.S. federal government. In a letter to DHS Acting Secretary Elaine Duke, Klobuchar requests information on the use of Kaspersky Lab software on critical infrastructure, including election systems. Klobuchar also called on DHS to detail its efforts to work with state and local election officials to ensure that election cybersecurity software is effective and secure.

“As Ranking Member of the Senate Rules Committee with jurisdiction over federal elections, I write to request information regarding U.S. government use of Moscow-based cyber security firm Kaspersky Lab,” Klobuchar wrote. “As we continue to receive reports that election systems in a majority of states have been targeted by hackers, it is imperative that we do everything in our power to ensure that future elections are safeguarded from foreign interference. That must include determining whether foreign companies with ties to the very government that is attempting to undermine our democracy represent a security threat to our critical infrastructure.”

As Ranking Member of the Senate Rules Committee with oversight jurisdiction over federal elections, Klobuchar has introduced legislation to improve the security of U.S. election systems and make commonsense improvements to election administration. She and Senator Roy Blunt (R-MO) introduced the bipartisan Stop Foreign Donations Affecting Our Elections Act to strengthen disclosure by requiring federal campaigns to use existing credit card verification protocols to help verify that online credit card donations come from U.S. sources. Klobuchar has also introduced the Helping State and Local Governments Prevent Cyber Attacks Act to help combat foreign interference by providing state and local governments with the information and resources they need to keep our elections secure and improve voter confidence.

In June, Klobuchar led Senate Rules Committee Democrats in a call for hearings and briefings on foreign attempts to hack into U.S. election systems and improving cyber security. Klobuchar also led a group of 26 senators in calling for a full account of the Election Assistance Commission’s (EAC) efforts to address Russian cybersecurity threats. In early January, Klobuchar introduced legislation with four other senators to create an independent, nonpartisan commission to comprehensively investigate Russian interference in the 2016 election.

The full text of the letter is below.

Dear Acting Secretary Duke: 

As Ranking Member of the Senate Rules Committee with jurisdiction over federal elections, I write to request information regarding U.S. government use of Moscow-based cyber security firm Kaspersky Lab.

Reports indicate that in February, the Department of Homeland Security issued a classified report on the use of Kaspersky computer security software and the company’s relationship to the Russian government.

Recent reports indicate that Kaspersky Lab has maintained a relationship with Russia’s intelligence agency, the FSB.  Kaspersky Lab was founded by Eugene Kaspersky after he graduated from the Institute of Cryptography, Telecommunications, and Computer Science, a KGB-backed institution in Moscow that is part of the Russian Federal Security Service (FSB) Academy. Kaspersky Lab software is used by millions of Americans and the U.S. federal government.

During a recent Intelligence Committee hearing Senator Rubio asked the U.S. intelligence community whether they would be comfortable having Kaspersky Lab software on their computers. Each one, from the Acting FBI Director to the Director of National Intelligence, said no. At that same hearing, Admiral Rodgers and Defense Intelligence Agency Director Stewart noted that they were closely tracking Kaspersky and that while Kaspersky software is not currently being used on their networks, they could not be sure whether that was the case with intelligence contractors. 

While our intelligence agencies may not use Kaspersky software, other federal agencies do. Public contracting reports show that Kaspersky Lab software has been used by the Department of Justice, the Treasury Department, the Department of State, and several other agencies. Given that our intelligence officials would not use Kaspersky Lab software, it is alarming that essential U.S. government agencies do. This is especially concerning because the Russian government is actively trying to undermine our democracy. 

Given that recent reports indicate the Russian military attempted to breach U.S. voting systems days before the 2016 presidential election, it is essential to ensure all U.S. election system software is secure. As our intelligence agencies and the FBI continue their assessment of Kaspersky Lab, we write with the following questions and respectfully request an expedited response.

  1. Does the Department of Homeland Security use Kaspersky Lab software on any critical infrastructure?
  2. Following the Department of Homeland Security memorandum on Kaspersky Lab, have you reached out to any State agencies to determine whether they use Kaspersky Lab software on state-level critical infrastructure?
  3. Do you know of any voting and elections systems that use Kaspersky software?
  4. How is the Department of Homelands Security working with state and local election officials to ensure that the computer security software they use is effective and secure?

As we continue to receive reports that election systems in a majority of states have been targeted by hackers, it is imperative that we do everything in our power to ensure that future elections are safeguarded from foreign interference. That must include determining whether foreign companies with ties to the very government that is attempting to undermine our democracy represent a security threat to our critical infrastructure.

Thank you for your prompt attention to this request. 

Sincerely,

###