
Image by Michael, from Unsplash
U.S. Cybersecurity Agency Struggles Amid Government Shutdown and Staff Shortages
The United States’ federal government shutdown has caused major disruptions across several departments, including one of the nation’s most critical cybersecurity agencies.
In a rush? Here are the quick facts:
- Only one-third of CISA employees remain on duty during the shutdown.
- CISA protects federal networks and critical infrastructure like energy and telecom.
- Nearly 1,000 CISA staff left since January 2025 through resignations or buyouts.
The Cybersecurity and Infrastructure Security Agency (CISA) is operating with only about one-third of its staff, raising serious concerns about national cyber defense. The situation was first reported by The Conversation.
CISA, part of the Department of Homeland Security, is responsible for protecting government networks and critical infrastructure sectors like telecommunications, energy, and the electric grid.
But the shutdown, which began on October 1, 2025, has forced many employees into unpaid furloughs, leaving a skeleton crew struggling to keep systems secure.
According to Department of Homeland Security documentation, “fewer CISA employees are being asked to do more and more work protecting American cyberspace during the shutdown.” They are currently working without pay until the government resumes operations.
The agency’s troubles come on top of budget cuts, mass resignations, and leadership losses earlier this year. Since January 2025, nearly 1,000 CISA employees have left, and by May, nearly all senior leaders had resigned or announced plans to do so.
The White House’s proposed 2026 budget further reduces CISA’s workforce by nearly one-third, slashing funding for cyber education and training programs.
To make matters worse, Congress failed to renew the Cybersecurity Information Sharing Act, a key law that enabled public-private information exchange about cyber threats. Without it, companies may hesitate to share data on attacks, fearing legal exposure.
Experts warn that the timing couldn’t be worse, with ongoing cyberattacks like China’s Salt Typhoon targeting U.S. telecom networks and ransomware campaigns surging.
As The Conversation report noted, malicious hackers often strike “when their target’s guard is down.” The shutdown, expired cybersecurity laws, and funding cuts together leave America’s digital defenses in one of their weakest states in years.