Although the President Joe Biden stated Tuesday that there was minimal damage to American businesses from the largest ransomware attack ever recorded, information remains incomplete. Although the company that exploited its software said that less than 1,500 businesses around the world were affected, cybersecurity experts warn that this isn’t the end of the story.

A security researcher also chatted with the Russian-linked REvil gang behind Tuesday’s attack. They claimed to have stolen data in hundreds of companies but provided no evidence.

Biden answered a question from a reporter at a White House event about vaccines. He said that his national security team had provided him with an update Tuesday morning regarding the attack. The attack exploited a powerful remote management tool owned by Kaseya, a Miami-based software company, in what is known to be a supply-chain breach attack.

Biden stated that although it appears to have caused minimal damage, we are still gathering information. “And I’m going have more to talk about this in the coming days,” Biden said. A Cybersecurity and Infrastructure Security Agency official spoke on condition that they not be identified and stated that no critical infrastructure or federal agencies appear to have been affected.

Also Read: Global tax reform plan goes to the G20

On Wednesday, Biden and Vice President Kamala Harris will lead an interagency meeting to discuss the administration’s efforts to counter ransomware

White House spokeswoman Jen Psaki held out the prospect of retaliatory action. What Biden told President Vladimir Putin in Geneva last month still holds, she said: “If the Russian government cannot or will not take action against criminal actors residing in Russia, we will take action or reserve the right to take action on our own.”