CyberScoop first reported on the existence of the directive, which calls the pilfered emails “a grave and unacceptable risk to agencies."

U.S. cybersecurity officials issued an emergency directive this week to address a breach by Russian operatives of Microsoft first disclosed in January.