News Summary

• But three experts in and out of government said that the attack was deeper and broader than the disclosures to date reveal.Two said that more than 10 companies, and perhaps far more, are expected to come forward..
• Security experts expect many more companies to disclose that they’ve been hacked by Russian intelligence agents who stole emails from executives following disclosures by Microsoft and Hewlett-Packard Enterprise in the past week.Microsoft said late Thursday that it had found more victims and was in the process of notifying them..
• That helped spur the recent disclosures.Microsoft, HPE and the experts said that Russia’s SVR foreign intelligence service has been inside the targeted companies for months..
• “Their low profile is indicative of a stealthy and adept approach, making it clear that their actions persist even if they remain elusive from public scrutiny.”The Microsoft and HPE breaches are especially concerning because so many other companies and agencies rely on them for cloud services, including email..
• The experts spoke on the condition of anonymity so as to maintain relations with the victims.The Securities and Exchange Commission last year strengthened the rules that require companies to notify their stockholders of computer intrusions that could have a material impact on company results..
• Once inside, the hackers created new accounts and new apps with more internal powers.Also known as Cozy Bear, the group last made international news for getting inside the software provider SolarWinds..