'Supermicro' servers and components installed in NCA assets

Robin Eveleigh made this Freedom of Information request to National Crime Agency
You only have a right in law to access information about the environment from this authority
This request has been closed to new correspondence. Contact us if you think it should be reopened.

The request was refused by National Crime Agency.

Dear National Crime Agency,

I would like to request information relating to your IT hardware inventory, with specific focus on components or servers assembled by the company 'Supermicro'. They are headquartered in the States, but have an assembly plant in the Netherlands.

I'm seeking answers to the following:

Does the NCA have Supermicro components or servers installed in any of its facilities?

When was the installation made?

From which Supermicro assembly facility did the components or servers originate?

Has the NCA ever been alerted to the possibility that the security of Supermicro servers may have been compromised through the introduction of concealed rogue hardware - a tiny microchip - enabling third parties (hackers) to access the servers?

What action was taken in response to this alert?

Were any security compromises discovered?

Is the NCA aware of a story circulated this week by Bloomsberg about the security of Supermicro servers being compromised through the introduction of concealed rogue hardware - a tiny microchip - enabling third parties (hackers) to access the servers?

Is the NCA taking any action in relation to this story?

Yours faithfully,

Robin Eveleigh

PICU Enquiries, National Crime Agency

OFFICIAL

Good afternoon,

Thank you for contacting the National Crime Agency (NCA).

NCA is not listed in Schedule 1 of the Freedom of Information Act 2000, and as such is not obliged to respond to Freedom of Information requests. NCA is also not listed as a ‘Scottish Public Authority’ in the Freedom of Information (Scotland Act 2002).

Any information from, or relating to NCA has an absolute exemption from disclosure by other public authorities by virtue of Section 23 of the Act (as amended by the Crime and Courts Act 2013).

From time to time NCA will make limited information available on the web site www.nationalcrimeagency.gov.uk.

Whilst we will not respond to specific requests, we will consider written suggestions about information we may consider publishing in the future.

For more information about the Freedom of Information Act, please contact the Office of the Information Commissioner, or view their web site at www.ico.org.uk.

Yours sincerely

Public Information Compliance Unit
Information Department | Technology Command National Crime Agency Po Box 58345, London NW1W 9JJ www.nationalcrimeagency.gov.uk www.facebook.com/NCA
Twitter: @NCA_UK

NCA mission: leading the UK's fight to cut serious and organised crime.

show quoted sections