Russian hackers stole US court files on espionage and other cases for years
Photo: Russian hackers stole classified materials from US courts for years (Getty Images)
Russian government hackers had access to the US court system for several years, deliberately stealing classified materials in cases involving espionage, money laundering, and foreign agents, reports Bloomberg.
Russian hackers exploited stolen login credentials and a vulnerability in an outdated federal court server. They specifically sought documents that judges had ordered to be kept secret.
Investigators are certain the attack was carried out by a group operating under Russian state protection. It remains unclear when the hackers first infiltrated the system and when US authorities became aware of the breach. According to one of Bloomberg’s sources, it was only last fall that the courts hired a cybersecurity firm to address the aftermath of the attack.
Classified cases at risk
Years of access to sealed materials raise serious concerns. The compromised documents involve cases of espionage, financial crimes, money laundering, and the activities of foreign agents. In the wrong hands, these materials could be used for pressure, blackmail, or to sabotage investigations.
"These court records are some of the most valuable documents our government holds," said Jake Braun, former principal deputy national cyber director at the White House.
He noted that the court system is underfunded by Congress, making it vulnerable to such attacks.
Reaction and political context
The scandal erupted as US President Donald Trump prepared to meet with Russian leader Vladimir Putin to discuss ending the war in Ukraine.
When asked by reporters whether he would raise the issue of the cyberattack, Trump replied: "They hack in, that's what they do. They're good at it, we're good at it, we're actually better at it."
Court officials declined to comment, saying only that they were taking additional security measures in response to “intensified and sophisticated cyberattacks.”
Background and new security measures
This is not the first major breach of the US court system. In 2020, there was a massive data leak also attributed to Russian hackers. At the time, the attackers used malicious code embedded in SolarWinds software.
In November of last year, the courts brought in Unit 42 (Palo Alto Networks) specialists to mitigate the impact of the latest attack. The work was completed by the end of 2024.
Restrictions on handling classified documents
Earlier, RBC-Ukraine reported that following the attack, more than a dozen federal courts across the country changed their rules for submitting highly sensitive materials. In some districts, all classified documents must now be submitted only on paper.
In the Eastern District of New York, the chief judge banned uploading any sealed materials related to criminal cases into the electronic system.
