The US Department of Homeland Security has ordered all civilian agencies to remove Acronis software from their information systems. The directive cites concerns over the company's historical ties to Russia as the primary reason for the ban.
Agencies must comply with the removal order by January 27, 2027. This deadline provides less than three months for the transition, a period that includes the upcoming holiday season.
Acronis, a developer of backup and data protection software, has faced scrutiny for nearly a decade. The investigation examined whether the company continued to rely on Russian developers and maintained links to local entities such as Cyberprotect, which previously localized code for Russian government use.
Despite these measures, the company has undergone significant changes. In 2022, it ceased operations in Russia and relocated staff. In 2024, a majority stake was sold to the Swedish fund EQT X for over $3.5 billion. Founder Serg Bell also stepped down as CEO in 2025.
The civilian agency ban follows similar restrictions imposed by the US intelligence community in July 2025, as well as actions taken by the General Services Administration and the Department of Defense. As of November 3, 2026, Acronis has not indicated whether it will challenge the DHS decision.
