Based on information from Nextgov, the U.S. government has issued a directive requiring federal civilian agencies to remove all software products from the cybersecurity firm Acronis.
The order, signed July 31 by Department of Homeland Security Secretary Markwayne Mullin, follows years of scrutiny regarding the company's development ties to Russia. While officials found no concrete evidence of backdoors, the Federal Acquisition Security Council expressed concerns over foreign ownership, control or influence, known as FOCI, and potential supply chain risks. Agencies must eliminate the software by Jan. 27. The decision marks the culmination of a decade-long review process involving multiple presidential administrations. Although Acronis, now headquartered in Switzerland, has taken steps to distance itself from Russia and underwent a majority acquisition by the private equity firm EQT in 2025, federal officials maintained their security concerns. The directive specifically targets federal civilian systems, though it does not prohibit the company from operating in the private sector. Various agencies, including the Drug Enforcement Administration and the National Oceanic and Atmospheric Administration, have historically utilized the firm's data protection and backup solutions. This action highlights the federal government's rigorous approach to managing supply chain security and mitigating potential foreign influence within critical infrastructure.
Source: Nextgov
