cybersecurity

The United States is committed to safeguarding the integrity of our information and communication technology against cyber threats. Today, the Department of the Treasury is sanctioning 12 executives or senior leaders of AO Kaspersky Lab, a Russian cybersecurity and antivirus company.

The Department of Commerce has issued a final determination prohibiting Kaspersky Lab, Inc., along with its affiliates, subsidiaries, and parent companies, from directly or indirectly offering antivirus software and cybersecurity products or services in the United States or to U.S. persons due to the risks these products pose to national security.

In addition, Commerce designated AO Kaspersky Lab and OOO Kaspersky Group (Russia), and Kaspersky Labs Limited (United Kingdom) on Commerce’s Entity List for their cooperation with Russian military and intelligence authorities in support of the Russian government’s cyber intelligence objectives.  These activities are contrary to U.S. national security and foreign policy interests.

Kaspersky’s cybersecurity products and solutions provide broad access to files and elevated privileges to the computers on which the software is installed.  Kaspersky is subject to the jurisdiction, control, or direction of the Russian government, which could exploit the privileged access to obtain sensitive data, including personal information, or bypass cybersecurity measures, thereby posing an unacceptable risk to U.S. national security or the safety and security of U.S. persons.  Today’s action demonstrates the U.S. Government’s determination to use the tools at our disposal to safeguard the United States’ information and communication technology supply chain and notify the public of the risks presented by Kaspersky Lab technology.

The Department of the Treasury is designating the 12 individuals pursuant to Executive Order (E.O.) 14024, as amended, for operating in the technology sector of the Russian Federation economy. The Department of Commerce issued its final determination pursuant to E.O. 13873.  The Entity List designations will take effect on June 24, 2024.  For more information on these actions, see Treasury’s press release and Commerce’s press release.