\n<\/p>\n
ProPublica is a nonprofit newsroom that investigates abuses of power. Sign up to receive our biggest stories as soon as they\u2019re published.<\/p>\n
The Pentagon issued a \u201cletter of concern\u201d to Microsoft documenting a \u201cbreach of trust\u201d over the company\u2019s use of China-based engineers to maintain sensitive government computer systems, Defense Secretary Pete Hegseth announced this week. At the same time, the Defense Department is opening an investigation into whether any of those employees have compromised national security.<\/p>\n
The actions came in response to a recent ProPublica investigation that exposed Microsoft\u2019s \u201cdigital escort\u201d system, in which U.S. personnel with security clearances supervise foreign engineers, including those in China. ProPublica found that the escorts often lack the expertise needed to effectively supervise engineers with far more advanced technical skills.<\/p>\n
The tech giant developed the arrangement as a work-around to a Defense Department requirement that people handling sensitive data be U.S. citizens or permanent residents.<\/p>\n
\u201cThe program was designed to comply with contracting rules, but it exposed the department to unacceptable risk,\u201d Hegseth said in a video announcement posted on X. \u201cIf you\u2019re thinking America first and common sense, this doesn\u2019t pass either of those tests.\u201d<\/p>\n
The letter serves as a warning to Microsoft, which has said in earnings reports that it receives \u201csubstantial revenue from government contracts.\u201d It is less serious than a \u201ccure notice,\u201d which could lead to termination of Microsoft contracts if problems are not fixed. The department did not release the letter publicly, and it did not reply to ProPublica\u2019s request for a copy of it.<\/p>\n
Experts have said allowing China-based personnel to perform technical support and maintenance on U.S. government computer systems poses major security risks. Laws in China grant the country\u2019s officials broad authority to collect data, and experts say it is difficult for any Chinese citizen or company to meaningfully resist a direct request from security forces or law enforcement.<\/p>\n
Hegseth said the newly opened Pentagon investigation into the digital escort program would focus on Microsoft\u2019s China-based employees. The probe will \u201chelp us determine the impact of this digital escort workaround,\u201d he said, including whether \u201cthey put anything in the code that we didn\u2019t know about.\u201d<\/p>\n
Hegseth said in his video announcement that the department is also requiring a new third-party audit of Microsoft\u2019s digital escort program. It is unclear who will conduct that audit.<\/p>\n
Microsoft started using digital escorts about a decade ago, ProPublica found, and went on to win federal cloud computing business worth billions of dollars. Through the Obama, Trump and Biden administrations, the system escaped the notice of Pentagon officials. ProPublica reported last week that Microsoft failed to disclose key details of the arrangement in the security plans it submitted to the Defense Department. The company has declined to comment on those omissions.<\/p>\n
\u201cWe expect vendors doing business with the Department of Defense to put U.S. national security ahead of profit maximization,\u201d Hegseth said in the video.<\/p>\n
In the wake of ProPublica\u2019s reporting, Microsoft announced last month that it had stopped using China-based engineers to support Defense Department cloud computing systems. In a statement provided for this story, the company said that it \u201cwill continue to collaborate with the US Government to ensure we are meeting their expectations.\u201d<\/p>\n
\u201cWe remain committed to providing the most secure services possible to the US government, including working with our national security partners to evaluate and adjust our security protocols as needed,\u201d the company said in the statement.<\/p>\n
In addition to China, Microsoft has operations in India, the European Union and elsewhere across the globe, and engineers in those places also work on Defense Department cloud maintenance.<\/p>\n
Last month, Hegseth said on X that \u201cforeign engineers \u2014 from any country, including of course China \u2014 should NEVER be allowed to maintain or access DoD systems.\u201d But last week, in response to ProPublica\u2019s questions, the Defense Department left the door open to the continued use of foreign-based engineers with digital escorts, saying that it \u201cmay be deemed an acceptable risk,\u201d depending on factors that include \u201cthe country of origin of the foreign national\u201d being escorted.<\/p>\n
\n Microsoft Failed to Disclose Key Details About Use of China-Based Engineers in U.S. Defense Work, Record Shows<\/strong>\n <\/p>\n In his announcement, Hegseth did not mention whether the escort program would continue or say whether Microsoft\u2019s reliance on other foreign nationals to maintain the Defense Department\u2019s computer systems would also be reviewed. The department did not respond to questions from ProPublica seeking additional information about the new investigations.<\/p>\n ProPublica reported last month that Microsoft has also relied on its China-based employees to maintain federal cloud computing systems beyond the Defense Department, including those of the departments of Justice, Treasury and Commerce. In response to the reporting, Microsoft has suggested that it would also discontinue the use of China-based engineers for those departments.<\/p>\n In this week\u2019s announcement, Hegseth said the Defense Department was working \u201cwith our partners in the rest of the federal government to ensure that all U.S. networks are protected.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":" ProPublica is a nonprofit newsroom that investigates abuses of power. Sign up to receive our biggest stories as soon as they\u2019re published. The Pentagon issued a \u201cletter of concern\u201d to Microsoft documenting a \u201cbreach of trust\u201d over the company\u2019s use of China-based engineers to maintain sensitive government computer systems, Defense Secretary Pete Hegseth announced this<\/p>\n","protected":false},"author":1,"featured_media":18300,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[55],"tags":[6650,4728,4729,2526,247,1876],"class_list":{"0":"post-18299","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-social-issues","8":"tag-breach","9":"tag-chinabased","10":"tag-engineers","11":"tag-microsofts","12":"tag-propublica","13":"tag-trust"},"_links":{"self":[{"href":"https:\/\/naijaglobalnews.org\/index.php?rest_route=\/wp\/v2\/posts\/18299","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/naijaglobalnews.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/naijaglobalnews.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/naijaglobalnews.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/naijaglobalnews.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=18299"}],"version-history":[{"count":0,"href":"https:\/\/naijaglobalnews.org\/index.php?rest_route=\/wp\/v2\/posts\/18299\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/naijaglobalnews.org\/index.php?rest_route=\/wp\/v2\/media\/18300"}],"wp:attachment":[{"href":"https:\/\/naijaglobalnews.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=18299"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/naijaglobalnews.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=18299"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/naijaglobalnews.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=18299"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}