Russian hackers reportedly used popular antivirus software to steal NSA data

It's "one of the most significant security breaches in recent years."
 By 
Karissa Bell
 on 
Russian hackers reportedly used popular antivirus software to steal NSA data
The headquarters of the National Security Agency. Credit: REX/Shutterstock

Russian hackers stole "highly classified" NSA files laying out how the agency combats cyberattacks and spies on other countries' networks, according to a new report in The Wall Street Journal.

The hackers reportedly found the files via Kaspersky's antivirus software after an National Security Agency contractor put the files on his home computer.

The attack, which happened in 2015 though it was only discovered last year, "is considered by experts to be one of the most significant security breaches in recent years." The files reportedly lay out key parts of the NSA's strategy for spying and defending itself against cyberattack.

As the WSJ notes, the stolen data could have big implications for Russia's ability to both attack U.S. networks and defend itself from the NSA.

Having such information could give the Russian government information on how to protect its own networks, making it more difficult for the NSA to conduct its work. It also could give the Russians methods to infiltrate the networks of the U.S. and other nations, these people said.

The report also goes a long way toward explaining government officials' recent concerns over Kaspersky's software. The Russian company's software was banned from U.S. government agencies last month after a report in Bloomberg alleged the company had been working closely with the Russian government for years.

In a statement, Kaspersky CEO Eugene Kaspersky said his company "has not been provided any evidence substantiating the company's involvement in the alleged incident."

"The only conclusion sees to be that Kaspersky Lab is caught in the middle of a geopolitical fight."

Others in the cybersecurity community were quick to point out that the WSJ's report stops short of suggesting that Kaspersky worked directly with the Russian government on the hack. Instead, it's possible that the Russians exploited vulnerabilities within Kaspersky's software to get the data.

Either way, the breach is the latest headache for the NSA, which has faced criticism over its handling of repeated leaks.

Topics Cybersecurity

Mashable Image
Karissa Bell

Karissa was Mashable's Senior Tech Reporter, and is based in San Francisco. She covers social media platforms, Silicon Valley, and the many ways technology is changing our lives. Her work has also appeared in Wired, Macworld, Popular Mechanics, and The Wirecutter. In her free time, she enjoys snowboarding and watching too many cat videos on Instagram. Follow her on Twitter @karissabe.

Mashable Potato

Recommended For You
Iran-linked hackers launch cyberattack against U.S. medtech company Stryker
Stryker logo on medical equipment

Match Group responding to alleged hack of user data
Tinder and Match Group logo displayed on a phone screen


Panera Bread breach: ShinyHunters claims hack of 14 million customers' data
Panera Bread logo on storefront

How hackers are stealing millions from ATMs, FBI warns
a card being inserted into an atm

Trending on Mashable
NYT Connections hints today: Clues, answers for April 3, 2026
Connections game on a smartphone

Wordle today: Answer, hints for April 3, 2026
Wordle game on a smartphone

What's new to streaming this week? (April 3, 2026)
A composite of images from film and TV streaming this week.

NYT Strands hints, answers for April 3, 2026
A game being played on a smartphone.

You can track Artemis II in real time as Orion flies to the moon
Victor Glover and Reid Wiseman piloting the Orion spacecraft
The biggest stories of the day delivered to your inbox.
These newsletters may contain advertising, deals, or affiliate links. By clicking Subscribe, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy.
Thanks for signing up. See you at your inbox!