US spy satellite agency National Reconnaissance confirms cyberattack, data breach
Learn More
The National Reconnaissance Office (NRO), america's agency responsible for designing, building, and operating reconnaissance satellites for the U.S. intelligence community, confirmed a computer intrusion affecting its unclassified vendor portal systems.
The breach targeted the Acquisition Research Center (ARC), the agency's public-facing website used for vendor contracting and technology acquisition processes.
The data security incident appears to be connected to the broader exploitation campaign targeting Microsoft SharePoint servers through critical zero-day vulnerabilities tracked as CVE-2025-53770 (CVSS score 9.8). NRO has not confirmed that the attack has used the SharePoint flaw.
Exposed data includes:
- Vendor contact information and proposals
- Contract bidding details and speciafications
- Technology acquisition research data
- Unclassified CIA Digital Hammer program information
- Market research and technology assessment data
According to the Washington Times, attackers may have obtained sensitive information related to CIA technology acquisition efforts, including data tied to the agency's Digital Hammer program. The NRO reports that the incident is under investigation in collaboration with federal law enforcement agencies.
