The people tasked with keeping the country safe from foreign government hackers and cybercriminal gangs say they feel like they\u2019re under attack, not from their usual adversaries but from the administration they work under. <\/p>\n\n\n\n
President Donald Trump\u2019s Wednesday order<\/a> calling for a Justice Department investigation into Chris Krebs, the former director of the Cybersecurity and Infrastructure Security Agency (CISA), has sent fresh shock waves through that agency\u2019s hallways, according to five employees who spoke with NBC News. Each spoke on the condition of anonymity because they were not authorized to speak publicly. <\/p>\n\n\n\n The order comes as the White House is downsizing the agency for at least the third time in three months. <\/p>\n\n\n\n \u201cIt\u2019s a really tough time for all of us right now,\u201d said one employee. \u201cEvery day feels somehow more bizarre than the last. It is incredibly difficult to focus on our mission.\u201d <\/p>\n\n\n\n Krebs, whom Trump appointed as CISA\u2019s inaugural director during his first term, quickly built the agency into the country\u2019s front-line digital defender of critical systems. But he also emerged as a surprising counterpoint to the president, particularly around his efforts to advance false claims that the 2020 presidential election was stolen. <\/p>\n\n\n\n The order Trump signed cites Krebs\u2019 insistence that there is no credible evidence of widespread fraud in the 2020 election, despite Trump\u2019s false but often-repeated claims. Also signed by the homeland security secretary, it directs the attorney general to \u201ctake all appropriate action to review\u201d Krebs\u2019 activities. <\/p>\n\n\n\n Employees who spoke to NBC News largely believe Trump\u2019s action was politically motivated. Trump also revoked Krebs\u2019 security clearance. <\/p>\n\n\n\n \u201cI feel so sickened by this. It\u2019s a shocking abuse of power,\u201d one said. <\/p>\n\n\n\n Trump\u2019s moves on Krebs and CISA come as the U.S. faces mounting cybersecurity challenges, most notably from China, which has in just the last two years shown its capability to penetrate deep into sensitive U.S. infrastructure as well as government systems, federal officials say. For-profit hackers have also turned ransomware into a\u2002<\/a>billion dollar<\/a> criminal enterprise that shuts down hospitals<\/a>, schools<\/a> and many businesses<\/a>. <\/p>\n\n\n\n Republicans quickly coalesced around Trump\u2019s election claims and politicized the agency\u2019s efforts to coordinate with technology companies to secure elections, including how to counter the spread of foreign propaganda<\/a>. <\/p>\n\n\n\n Under Krebs, CISA coordinated a unified response from government agencies and states disputing false claims of election fraud, many of which Trump and his allies used to justify his attempts to stay in office. Trump fired Krebs<\/a> two weeks after that election. <\/p>\n\n\n\n \u201cThis EO targeting former director Krebs seems based in personal vendetta, and no American should be comfortable with that,\u201d another CISA employee said. <\/p>\n\n\n\n Krebs declined to comment. On Wednesday evening, he reposted to X the message he first published in 2020 after Trump fired him: \u201cHonored to serve. We did it right. Defend Today, Secure Tomorrow. #Protect2020.\u201d <\/p>\n\n\n\n The Trump administration is also currently purging CISA\u2019s workforce, according to emails to staff obtained by NBC News. The Department of Homeland Security, CISA\u2019s parent agency, sent a memo Monday evening that encouraged employees to retire early or take a buyout package by Monday. <\/p>\n\n\n\n A second email, sent by CISA acting director Bridget Bean, reiterated that offer. Trump has nominated a permanent director, Sean Plankey, who has yet to be confirmed by the Senate. A CISA spokesperson declined to comment. The White House didn\u2019t respond to a request for comment. <\/p>\n\n\n\n A DHS spokesperson declined to share how many employees it expected to cut, but said in an emailed statement: \u201cEvery dollar spent and position filled at DHS should be focused on our core mission of securing our homeland and keeping the American people safe.\u201d <\/p>\n\n\n\n Those buyout offers echo a round of emails that DHS sent to CISA employees in February. A DHS spokesperson told NBC News that month it had also cut more than 130 employees who had probationary status and that it deemed \u201cnon-mission critical personnel.\u201d <\/p>\n\n\n\n On Sunday, before the Krebs news and as rumors spread that the second round of buyout offers was going out, Jen Easterly, who succeeded Krebs as CISA\u2019s director under President Joe Biden, posted to LinkedIn about why the cuts could hurt U.S. security. <\/p>\n\n\n\n \u201cDegrading the capability and capacity of the federal cyber ecosystem\u2014whether by laying off hundreds of highly talented cyber professionals at America\u2019s cyber defense agency or by decapitating the highly effective, nonpartisan, and principled leadership of America\u2019s most important technical intelligence agency\u2014will only make Americans less safe and more vulnerable to our adversaries,\u201d Easterly wrote. <\/p>\n\n\n\n One CISA employee said the repeated staff reductions hampered the agency\u2019s ability to secure critical infrastructure, which often relies on experts who are familiar with highly specialized computer programs and operating systems. <\/p>\n\n\n\n \u201cThe cuts that happened initially have already severely degraded our capacity to defend critical infrastructure,\u201d the employee said. \u201cThe cuts that may come \u2014 I don\u2019t know what the numbers are going to look like \u2014 but they without a doubt will further degrade our ability to defend critical infrastructure.\u201c <\/p>\n\n\n\n Trump\u2019s executive order also suspended the security clearances of employees at the cybersecurity company where Krebs works, SentinelOne. <\/p>\n\n\n\n