The 2015 Cybersecurity Information Sharing Act provided a legal framework for companies to share data with the government, but Congress failed to renew it before the shutdown.
Don’t miss out on our latest stories. Add PCMag as a preferred source on Google.
Amid the ongoing US government shutdown, a key piece of cybersecurity legislation has expired—and both security experts and lawmakers warn it could endanger critical national infrastructure, Politico reports.
The 2015 Cybersecurity Information Sharing Act facilitated information sharing between the government and the private sector, thereby protecting companies from the legal risks associated with sharing sensitive data.
It was instrumental in uncovering attacks by foreign powers on US critical infrastructure, including a campaign by the state-sponsored Chinese hacking group dubbed “Salt Typhoon,” in which China allegedly gained access to US telecommunications networks, including AT&T and Verizon. The campaign involved Chinese hackers attempting to spy on high-profile politicians, including Donald Trump, and is believed to have accessed records belonging to approximately 1.