US intelligence agencies have said they believe Russia was behind the "serious" cyber compromise revealed in December.President Trump had previously suggested China might have been behind the hack, although other members of his administration had pointed the finger at Moscow.
They say work is still going on to understand the scope of the incident, which appears to have been aimed at gathering intelligence and which they say is "ongoing" a month after details first emerged.
"This is a serious compromise that will require a sustained and dedicated effort to remediate," the statement said. Many organisations are having to scour their systems for signs that they may have been compromised.The incident sent shockwaves across the US partly because the breach was undiscovered for many months and was potentially far-reaching in terms of who it might have affected. It also suggested a degree of sophistication and stealth which was widely seen as a trademark of hackers from the SVR, Russia's foreign intelligence agency.
President-elect Joe Biden has previously said it was important to take "meaningful steps" to hold those responsible to account. It is not yet clear, though, what that might involve. While some US politicians suggested the breach might even be compared to an "act of war", most cyber-experts disputed this and the US intelligence community has now played down suggestions that it could have had destructive impact.
"At this time, we believe this was, and continues to be, an intelligence-gathering effort," the latest statement says. This is significant since it suggests no evidence has been found that this was preparatory activity for a more destructive cyber-attack which might switch off systems. This may limit the US response since espionage operations do not breach the cyber norms the US itself promotes (largely because it too carries out such intelligence-gathering operations against other nations).