FBI Probes Foreign Role in HHS Cyber Incident

The attack came days after a foreign entity attempted to sow fears of a nationwide quarantine.

Attorney General William Barr arrives at the White House, March 10, 2020.
Attorney General William Barr arrives at the White House, March 10, 2020.
AP Photo/Patrick Semansky

WASHINGTON (AP) — Attorney General William Barr vowed in an interview with The Associated Press on Tuesday that there would be swift and severe action if a foreign government is behind disinformation campaigns aimed at spreading fear in the U.S. amid the coronavirus pandemic or a denial of service attack on the networks of the Department of Health and Human Services.

“Our primary role right now is to investigate,” Barr said. “The FBI is very active, trying to determine who is responsible for these things.”

U.S. national security officials said Monday there had been a “cyber incident” involving the computer networks of the Health and Human Services Department, but the networks were operating normally. They didn’t detail the scope of the incident, but HHS Secretary Alex Azar later said the networks were not penetrated and that the department has taken strong defensive action.

A denial of service attack occurs when a perpetrator trying to make a network unavailable to its intended user temporarily disrupts internet connections.

It came just days after federal officials began confronting what they said was a deliberate effort by a foreign entity to sow fears of a nationwide quarantine amid the virus outbreak. Agencies took coordinated action Sunday evening to deny that any such plans were put in place, as they tried to calm a nation already on edge by disruptions to daily life caused by the coronavirus.

Barr told the AP the federal government would take action against anyone who was trying to take advantage of the crisis or against foreign governments that could be trying to spread misinformation and stoke fear or slow down the U.S. response to the virus. He didn't speculate which government may be behind it.

“When you’re dealing with something like a denial of service attack on HHS during a pandemic, that’s a very grave action for another country to take,” Barr said. “So, if it is another country doing this, I’m sure the ramifications will be severe.”

Rumors about the government’s response to the spreading virus have circulated online for weeks, prompting authorities in several states to urge residents to seek out trusted sources in government and news. Barr said he had not been involved in any conversations and wasn’t aware of any plans for a potential national quarantine.

He said there had been “increasing indications of people trying to take advantage of the crisis,” including reports of people selling fake test kits and phony cures.

On Monday, Barr directed U.S. attorneys across the U.S. to prioritize prosecuting all “criminal conduct related to the current pandemic.” In a memo, he warned that the Justice Department had seen reports of people selling fake cures for the coronavirus, phishing emails posing as official notices from the CDC and the World Health Organization and malware inserted in apps designed to track the spread of the virus. Those cases remain under investigation, Barr said.

“Our primary role is really to police the market and make sure people are not taking advantage,” he said.

For most people, the new coronavirus causes only mild or moderate symptoms, such as fever and cough. For some, especially older adults and people with existing health problems, it can cause more severe illness, including pneumonia. The worldwide outbreak has sickened more than 180,000 people and left more than 7,000 people dead. In the United States, there have been more than 4,000 confirmed cases and scores of deaths.

More in IoT