Top officials at the Cybersecurity and Infrastructure Security Agency on Wednesday told House lawmakers no federal agencies are known to be compromised by vulnerabilities found in Microsoft Exchange, but warned it is "an evolving campaign with new information coming in by the hour."
"The vast majority of Microsoft Exchange servers have been mitigated across the federal civilian executive branch. We are working with individual agencies to assess their results of their forensic analysis," Eric Goldstein, the executive assistant director for cybersecurity at CISA told a House Appropriations subcommittee. "At this point in time, there are no federal civilian agencies that are confirmed to be compromised by this campaign."