On Wednesday, the US cybersecurity agency said a sprawling cyber espionage operation made public earlier this month targeted state and local governments, although it released few additional details.

The hacking campaign used as a springboard to infiltrate federal government networks by US tech company SolarWinds was “impacting business networks across federal, state, and local governments, as well as critical infrastructure entities and other organizations of the private sector,”
Last week, the CISA reported that among those affected were US government agencies, critical infrastructure institutions, and private organizations, but did not explicitly name state or local bodies. So far, only a number of federal government departments, including the US Treasury Department, the Commerce Department, and the Department of Energy, have publicly stated that they have been affected.
The affected state or local entities were not listed by CISA and did not immediately return an email requesting more information about the notification.

Reuters has previously stated that among the victims of the wave of intrusions was Pima County, Arizona.