US sanctions Russia over SolarWinds hack, election interference

The government formally attributed the SolarWinds hack to Russia's foreign intelligence service.

Carrie Mihalcik Managing Editor / News
Carrie is a Managing Editor at CNET focused on breaking and trending news. She's been reporting and editing for more than a decade, including at the National Journal and Current TV.
Expertise Breaking News, Technology Credentials
  • Carrie has lived on both coasts and can definitively say that Chesapeake Bay blue crabs are the best.
Carrie Mihalcik
2 min read
Russian and American flags flying side by side

President Joe Biden ordered sanctions against Russia for actions by its government and intelligence services against US.

Getty Images

President Joe Biden on Thursday signed an executive order imposing a range of retaliatory measures against Russia for alleged election interference and malicious cyberactivity, including the widespread SolarWinds hack

The new measures sanction 32 entities and individuals for "carrying out Russian government-directed attempts to influence the 2020 US presidential election," and six Russian companies for providing "support to the Russian Intelligence Services' cyber program." The US is also expelling 10 Russian diplomats and putting in place economic restrictions. 

Key intelligence agencies had already said Russia was the likely origin of the SolarWinds hack, which used tainted software from IT management company SolarWinds to penetrate multiple US federal agencies and at least 100 private companies. On Thursday, the administration formally named Russia's foreign intelligence service, the SVR, as the perpetrator of the "broad-scope cyber espionage campaign." The National Security Agency, the Cybersecurity and Infrastructure Security Agency and the FBI issued a joint advisory outlining "software vulnerabilities that the SVR uses to gain access to victim devices and networks."

The administration said it's also taking steps with allies to bolster cybersecurity and evaluating whether to take further action under the executive order to protect supply chains from exploitation by Russia.

In March, a US intelligence report concluded that Russia spread disinformation about the 2020 election, though there were no persistent attempts by foreign actors to hack voting infrastructure. Russian President Vladimir Putin authorized "influence operations aimed at denigrating President Biden's candidacy" and supporting former President Donald Trump, as well as undermining confidence in the election result, the report said. 

The new measures come two days after Biden spoke with Putin, warning that the US would respond to cyberintrusions and election interference but also proposing a summit meeting, according to the White House.