Kaspersky Lab

Kaspersky Lab is a Russian cybersecurity firm restricted by several Western governments because its software has privileged system access and because authorities assessed that Russian law and state capabilities created unacceptable security risk. The United States measures are administrative and regulatory findings, not a criminal judgment that Kaspersky conducted espionage. Kaspersky has denied wrongdoing. This entry distinguishes the published risk findings from any stronger allegation of operational cooperation with Russian intelligence.

Exclusion history

Exclusion proceeded in two waves. In September 2017 the Department of Homeland Security directed federal civilian agencies to identify and remove Kaspersky products, and the FY2018 NDAA extended the restriction across the United States Government. In June 2024 the Commerce Department issued an information and communications technology services Final Determination prohibiting covered Kaspersky transactions in the United States. It allowed specified updates until 29 September 2024. OFAC separately designated twelve executives on 21 June 2024. As at the 29 July 2026 status lock, those distinct measures should not be collapsed into a single allegation or applied automatically to jurisdictions outside the United States.

Significance

Kaspersky was an early software-supply-chain exclusion based on the security consequences of privileged access and continuing vendor updates. That logic has points of contact with later restrictions involving Huawei, ZTE and Hikvision, but each case rests on distinct technology, evidence and legal authority. Kaspersky's transparency centres and relocation of some data processing did not reverse the United States Government's risk judgment. That outcome shows the limits of voluntary assurance where authorities assess that jurisdiction, control and update access create residual risk; it does not establish that audit or compliance can never restore trust in another case.

See also

Panopticon effect · Technology-embargo bundle · Huawei · ZTE · Hikvision · Russia · Weaponised interdependence · Grey-zone competition

Sources

• United States Department of Commerce, Bureau of Industry and Security, "Commerce Department Prohibits Russian Kaspersky Software for US Customers" (20 June 2024).
• United States Department of Commerce, Final Determination, Kaspersky Lab, Inc, 89 FR 52434 (24 June 2024).
• United States Department of Homeland Security, Binding Operational Directive 17-01: Removal of Kaspersky-branded Products (13 September 2017).
• United States Department of the Treasury, "Treasury Sanctions Kaspersky Lab Leadership in Response to Continued Cybersecurity Risks" (21 June 2024).
• Kaspersky Lab, Inc v United States Department of Homeland Security, 909 F.3d 446 (DC Cir. 2018).