Several U.S. agencies have been hacked as part of a broader cyberattack that has hit dozens of companies and organizations in recent weeks through a previously unknown vulnerability in popular file sharing software.
![](https://thenigerialawyer.com/wp-content/uploads/2026/06/ELLAN.png")
![](https://thenigerialawyer.com/wp-content/uploads/2026/05/2026-Summer-IDRI-Masterclass.jpg")
The Cybersecurity and Infrastructure Security Agency, the country’s top civilian cybersecurity watchdog, said Thursday that it is still investigating the scope of the hacks, according to Eric Goldstein, its executive assistant director.
“CISA is providing support to several federal agencies that have experienced intrusions,” he said. “We are working urgently to understand impacts and ensure timely remediation.”
The hackers exploited a vulnerability in a program called MOVEIt, a popular tool for quickly transferring files.
Charles Carmakal, chief technology officer of Mandiant, a cybersecurity company owned by Google whose clients include government agencies, said that he was aware of some data theft from federal agencies through the MOVEIt hacks.
It wasn’t immediately clear if the stolen files were sensitive or if the hackers had disrupted government systems. CNN first reported on CISA’s statement.
The incident marks the third known instance in as many years that foreign hackers have been able to break into multiple federal agencies and steal information. In 2020, hackers working for Russian intelligence broke into nine agencies by first hacking into software they used that was developed by a Texas company called SolarWinds. The following year, Chinese intelligence hackers broke into additional agencies through a remote work program called Pulse Secure.
In an interview with NBC News’ Andrea Mitchell on Thursday, CISA Director Jen Easterly said the agency was tracking the hackers “as a well-known ransomware group.”
That appeared to be a reference to an established cybercriminal group called CL0P.
Last week, CISA and the FBI issued a warning that CL0P was exploiting a previously unknown vulnerability in MOVEIt. In a rapid hacking spree, the group used that flaw to steal files from at least 47 organizations and demand payment to not publish them online, said Brett Callow, an analyst at the cybersecurity company Emsisoft.
CL0P is a primarily Russian-speaking cybercrime gang, said Allan Liska, a ransomware expert at the cybersecurity company Recorded Future.
The Office of the Director of National Intelligence declined to comment. The National Security Council didn’t immediately respond to a request for comment.
Wendi Whitmore, who leads threat analysis for the cybersecurity company Palo Alto Networks, said that CL0P’s campaign of hacking victims through MOVEIt was incredibly widespread.
“I think it’s at least hundreds, if not more,” of total victims, she said.
Interested buyers are encouraged to place their orders and enquiries via:
0704 444 4777, 0704 444 4999, 0818 199 9888
Website: www.alexandernigeria.com
“Order Justice Omolaye-Ajileye’s Electronic Evidence Books Now” — Essential Guides On Evidence Act, Case Law And Digital Proof
The book also examines Nigeria's legal ecosystem, focusing on the LPELR and NBA AI Guidelines. As a bonus, every purchase comes with a FREE eBook titled: How to Use the AI Features in LegalPedia and LawPavilion.
Ohio Books Ltd praises the publication, stating:
"....this is the only Nigerian book I know of on the topic."
How to Order:
📞 Call, Text, or WhatsApp: 08034917063 | 07055285878
📧 Email: benadigwe1@gmail.com
🌎 Website: www.benadigwe.com
Ebook Version: Access it directly online at https://selar.com/prv626
Authored by Ben Ijeoma Adigwe Esq., ACIarb (UK), LL.M, Dip. in Artificial Intelligence, Director at the Delta State Ministry of Justice, Asaba, Nigeria.
_______________________________________________________________________
