The US Department of Homeland Security has ordered certain Acronis products excluded from procurement by civilian federal executive agencies and removed from their information systems. The order was published in the Federal Register on October 30.
The order covers products developed by Acronis Inc., Acronis SCS and their affiliates. The official notice also names Acronis AG. The measures apply to the information technology products covered by the order and to procurement and systems within the civilian federal executive branch, not to the entire US software market.
The department cited the Federal Acquisition Supply Chain Security Act of 2018 as its legal basis. The notice records a decision to exclude the covered products from specified government procurement and remove them from the relevant systems. The department cites supply-chain security risks, not criminal allegations against the company.