National: Congress looks towards new data breach laws as Russian hack scope remains unknown | Tonya Riley/The Washington Post
Companies responding to a massive Russian hack urged Congress to update laws dictating how the private sector shares information about cybersecurity breaches with the government. “It is time not only to talk about, but to find a way to take action, to impose in an appropriate manner some kind of notification obligation on entities in the private sector,” Microsoft president Brad Smith told members of the Senate Intelligence Committee. “I think it’s the only way we’re going to protect the country and I think it’s the only way we’re going to protect the world.” We are just finding out more government and private sector victims who were compromised as part of the months-long SolarWinds hacking campaign discovered in December. The full scope of the victims of the Russian hack is still unknown since private companies have no legal obligation to come forward with the information. As the White House readies sanctions against Russia for the attack and other malign cyberactivity, as Ellen Nakashima reported, committee members from both parties expressed interest in boosting reporting requirements, which have failed in the past due to aggressive industry lobbying and Republican wariness over regulation.
Full Article: The Cybersecurity 202: Congress looks towards new data breach laws as Russian hack scope remains unknown – The Washington Post
