Microsoft confirmed on Friday that it will no longer allow China-based engineers to access Pentagon cloud systems after concerns were raised that such actions threatened United States national security.
“In response to concerns raised earlier this week about US-supervised foreign engineers, Microsoft has made changes to our support for U.S. Government customers to assure that no China-based engineering teams are providing technical assistance for DOD Government cloud and related services,” Microsoft’s chief communications officer, Frank Shaw, told the Washington Examiner. “We remain committed to providing the most secure services possible to the U.S. government, including working with our national security partners to evaluate and adjust our security protocols as needed.”
Microsoft is a major contractor to the U.S. government, with the Defense Department among the agencies relying on its technical services. The company’s changes Friday come after a ProPublica investigation earlier this week revealed that Microsoft was using Chinese engineers to service the Pentagon’s cloud computing systems and monitoring them with “digital escorts” accused of lacking the skillset to detect suspicious activity.
Sen. Tom Cotton (R-AR) was among lawmakers who responded to the investigation with alarm, calling on Defense Secretary Pete Hegseth to resolve the situation.
“The U.S. government recognizes that China’s cyber capabilities pose one of the most aggressive and dangerous threats to the United States, as evidenced by infiltration of our critical infrastructure, telecommunications networks, and supply chains,” Cotton, who chairs the Senate’s ntelligence committee and also serves on its armed services committe, wrote in a letter on Thursday to Hegseth.

The defense secretary swiftly responded to Cotton’s plea, telling him, “Spot on, senator,” in a post to X.
“Agree fully,” Hegseth said. “Our team is already looking into this ASAP. Foreign engineers — from any country, including of course China — should NEVER be allowed to maintain or access DOD systems.”
Hegseth ordered a two-week review of Pentagon cloud deals, as part of an investigation into possible threats to military infrastructure.
HEGSETH TURNS TO HIS MISSION TO RESHAPE THE MILITARY
“I’m announcing that China will no longer have any involvement whatsoever in our cloud services, effective immediately,” he continued in a video announcement. “We will continue to monitor and counter all threats to our military infrastructure and online networks.”
“This is obviously unacceptable, especially in today’s digital threat environment,” Hegseth added, blaming the issue on “a legacy system created over a decade ago, during the Obama administration.”
Ross O’Keefe contributed to this story.