Designating Kaspersky Lab Leadership in Response to Continued Cybersecurity Risks

The United States is determined to protect and preserve the integrity of our information and communication technology from cyber threats.  Today, the Department of the Treasury is designating 12 executives or senior leaders of AO Kaspersky Lab, a Russian cybersecurity and anti-virus company.

Yesterday, the Department of Commerce issued a final determination that prohibits Kaspersky Lab, Inc., its affiliates, subsidiaries and parent companies from directly or indirectly providing anti-virus software and cybersecurity products or services in the United States or to U.S. persons due to the risks these products pose to U.S. national security.  In addition, Commerce designated AO Kaspersky Lab and OOO Kaspersky Group (Russia), and Kaspersky Labs Limited (United Kingdom) on Commerce’s Entity List for their cooperation with Russian military and intelligence authorities in support of the Russian government’s cyber intelligence objectives.  These activities are contrary to U.S. national security and foreign policy interests.

Kaspersky’s cybersecurity products and solutions provide broad access to files and elevated privileges to the computers on which the software is installed.  Kaspersky is subject to the jurisdiction, control, or direction of the Russian government, which could exploit the privileged access to obtain sensitive data, including personal information, or bypass cybersecurity measures, thereby posing an unacceptable risk to U.S. national security or the safety and security of U.S. persons.  Today’s action demonstrates the U.S. Government’s determination to use the tools at our disposal to safeguard the United States’ information and communication technology supply chain and notify the public of the risks presented by Kaspersky Lab technology.

The Department of the Treasury is designating the 12 individuals pursuant to Executive Order (E.O.) 14024, as amended, for operating in the technology sector of the Russian Federation economy. The Department of Commerce issued its final determination pursuant to E.O. 13873.  The Entity List designations will take effect on June 24, 2024.  For more information on these actions, see Treasury’s press release and Commerce’s press release.