Department of Homeland Security Mandates Removal of Acronis Products from Federal Civilian Agencies by January 2027
The Department of Homeland Security (DHS) has issued an order requiring all federal civilian agencies to cease using and remove Acronis products by January 27, 2027. This directive, published on October 28, 2026, follows earlier exclusions of Acronis by the Director of National Intelligence and the Department of Defense, effectively banning the software across all federal buyers. The order does not cite a specific breach but rather highlights supply chain risk and the root-level access that backup tools inherently possess. This mandate necessitates a rapid transition for affected agencies, with concerns raised about the potential for rushed swaps to leave systems vulnerable, cut off access to historical backups, or introduce new security risks. The impact extends beyond civilian agencies to federal systems integrators, defense contractors, managed service providers, and even state and local governments, which often align with federal security standards.