So far, hearing that cyber risks of the Capitol attack were low.

* Congress isn't one big network
* Vulnerable machines held unclassified files
* Hill leaks so much already that truly sensitive stuff is walled off
* Rioters weren't there long enough for thorough, careful access

The only computer reported stolen so far was from Senator Merkley’s office. His staff declined to share details, citing an ongoing investigation.

For those wondering about the SCIFs, used for classified files and conversations, their doors were built to withstand embassy sieges, and they’re swept for bugs before every use.

We haven’t seen any indication that they were even targeted, much less seriously attacked.

Could one of the terrorists have seen a sensitive but unclassified email somewhere? Yes.

Could there have been Russian spies in the terrorist mob? Yes.

But there is no evidence for these claims. Hill IT staff will need to prioritize their response according to risk modeling.

One *real* problem I’m hearing about:

The House and Senate’s central IT offices — which don't directly manage as much as you think — may have logs of some activity (email searches, shared drive access) but they will struggle to build a complete picture of what was opened & seen.