Microsoft testifies before Congress about the SolarWinds hack as rivals shift blame

Microsoft president Brad Smith appeared on Tuesday along with executives from SolarWinds, FireEye, and CrowdStrike at US Senate hearings to provide new testimony on the hacking campaign that centered on SolarWinds and public cloud infrastructure.

In his opening statement, Smith praised FireEye for its openness and willingness to involve Microsoft in the attack investigation. He told lawmakers that the company has notified 60 customers, mostly in the US, that they were compromised and, in his words, “likely had data accessed in this campaign.” And he added that Microsoft believes the impact of the hack reaches internationally:

In addition to this estimate, we have identified additional government and private sector victims in other countries, and we believe it is highly likely that there remain other victims not yet identified, perhaps especially in regions where governments and other organizations where cloud migration is not as far advanced as it is in the United States. In truth, no one yet knows for certain, except the Russian attacker.