U.S. officials: Sony investigation was thorough

Movie Poster for

Several senior Obama administration officials went on the offensive this week to counter suggestions by outside experts that the FBI's publicly presented evidence for accusing North Korea of being behind the hack of Sony Pictures Entertainment is weak. The officials say the administration would not do something as serious as accuse another nation state of destructive hacking without proof or careful consideration of the diplomatic implications.

How the investigation of the Sony hack is perceived by cybersecurity experts and myriad state and non-state actors affects U.S. credibility in cyberspace, and administration officials say they are well aware of the stakes.

In deciding to name a country a culprit in a big cyberattack, "a) you better be right and b) you want to be able to do so with confidence and have people have confidence in your judgment," said Lisa Monaco, a top homeland security adviser at the White House. Diplomatic consequences "absolutely" factor into a decision to publicly accuse a country of hacking, she added during a Jan. 8 cybersecurity conference at Fordham University.

In an interview, an Obama administration official rejected any suggestion that there are reasons to doubt the investigation's findings. "We have every confidence of our attribution," the official said.

At the conference, Monaco said suggestions by outside experts that the FBI might have gotten it wrong were "counterproductive to our efforts to make very clear to both [North Korea] and other state and non-state actors who would engage in destructive and coercive activity like this that there will be consequences."

The FBI has also made it clear that investigators considered multiple competing theories about the Sony hack. Joe Demarest, assistant director of the FBI's Cyber Division, told reporters Jan. 8 that a multi-agency team of about a dozen officials considered various hypotheses about who was responsible for the hack, including nation states, criminal organizations and hacktivists. But they ultimately concluded that "it was clearly North Korea or a proxy put up by North Korea" that was responsible for the attack, Demarest said.

Chris Cummiskey, who until November was acting undersecretary for management at the Department of Homeland Security, said the FBI's certainty makes sense given the recent progress agencies have made in investigating cyberattacks.

"I think the FBI should have a pretty good sense, based on the investments they've made in cyber forensics, to know the origins of where the attack came from," he told FCW.

About the Author

Sean Lyngaas is an FCW staff writer covering defense, cybersecurity and intelligence issues. Prior to joining FCW, he was a reporter and editor at Smart Grid Today, where he covered everything from cyber vulnerabilities in the U.S. electric grid to the national energy policies of Britain and Mexico. His reporting on a range of global issues has appeared in publications such as The Atlantic, The Economist, The Washington Diplomat and The Washington Post.

Lyngaas is an active member of the National Press Club, where he served as chairman of the Young Members Committee. He earned his M.A. in international affairs from The Fletcher School of Law and Diplomacy at Tufts University, and his B.A. in public policy from Duke University.

Click here for previous articles by Lyngaas, or connect with him on Twitter: @snlyngaas.


  • Cybersecurity

    DHS floats 'collective defense' model for cybersecurity

    Homeland Security Secretary Kirstjen Nielsen wants her department to have a more direct role in defending the private sector and critical infrastructure entities from cyberthreats.

  • Defense
    Defense Secretary James Mattis testifies at an April 12 hearing of the House Armed Services Committee.

    Mattis: Cloud deal not tailored for Amazon

    On Capitol Hill, Defense Secretary Jim Mattis sought to quell "rumors" that the Pentagon's planned single-award cloud acquisition was designed with Amazon Web Services in mind.

  • Census
    shutterstock image

    2020 Census to include citizenship question

    The Department of Commerce is breaking with recent practice and restoring a question about respondent citizenship last used in 1950, despite being urged not to by former Census directors and outside experts.

Stay Connected

FCW Update

Sign up for our newsletter.

I agree to this site's Privacy Policy.