Skip to main content

June 25, 2025

US cyber defense agency loses five of six division chiefs amid attacks

Cybersecurity and Infrastructure Security Agency
Cybersecurity and Infrastructure Security Agency
Cybersecurity and Infrastructure Security Agency
Cybersecurity and Infrastructure Security Agency
Cybersecurity and Infrastructure Security Agency
+9

Cybersecurity agency loses five division directors amid leadership crisis

By Jun. 30, five of CISA’s six operational divisions will lack Senate-confirmed directors, creating its worst leadership crisis since the agency’s 2018 creation.

CISA is responsible for coordinating protection across 16 critical infrastructure sectors, including healthcare, energy, transportation, water and communications.

Hospitals and other critical infrastructure partners report week-long delays for federal ransomware response when CISA assistance is requested.

Chinese and Russian nation-state hackers have launched the largest wave of ransomware attacks on U.S. infrastructure in two years, timed to exploit CISA’s leadership vacuum.

Interim CISA leaders often lack full security clearances, preventing effective sharing of classified threat intelligence with the intelligence community.

🛡️National Security💡Technology

Ready to test your knowledge?

Take the full quiz to master this topic and track your progress.

Start Quiz

People, bills, and sources

Sean Plankey

CISA director nominee

Ron Wyden

U.S. senator

Madhu Gottumukkala

CISA deputy director

Bridget Bean

CISA executive director

What you can do

1

Contact your U.S. senators (via senate.gov/senators/contact) to urge them to confirm qualified cybersecurity leadership nominees based on expertise, not partisanship.

2

Track CISA nominations and other cybersecurity legislation on congress.gov: use the "Nominations" and "Browse Legislation" tools to follow confirmation hearings.

3

Subscribe to official CISA advisories (cisa.gov/news-events/cybersecurity-advisories) and follow StopRansomware.gov to stay informed about emerging threats and response best practices.

4

Join industry threat-sharing groups such as the Multi-State Information Sharing and Analysis Center (MS-ISAC) via cisecurity.org to access peer-to-peer alerts and resources.