A Chinese state-sponsored hacker has broken into the US Treasury Department’s systems, accessing employee workstations and some unclassified documents, American officials said on Monday.
The breach occurred in early December and was made public in a letter penned by the Treasury Department to lawmakers notifying them of the incident.
The US agency characterised the breach as a “major incident”, and said it had been working with the FBI and other agencies to investigate the impact.
The BBC has reached out to the Chinese embassy in Washington, DC for comment.
The Treasury Department said in its letter to lawmakers that the China-based actor was able to override security via a key used by a third-party service provider that offers remote technical support to its employees.
The compromised third-party service – called BeyondTrust – has since been taken offline, officials said. They added that there is no evidence to suggest the hacker has continued to access Treasury Department information since.
Along with the FBI, the Department has been working with the Cybersecurity and Infrastructure Security Agency and third-party forensic investigators to determine the breach’s overall impact.
Based on evidence it has gathered so far, officials said the hack appears to have been carried out by “a China-based Advanced Persistent Threat (APT) actor.”
“In accordance with Treasury policy, intrusions attributable to an APT are considered a major cybersecurity incident,” Treasury Department officials wrote in their letter to lawmakers.
The Department was made aware of the hack on 8 December by BeyondTrust, a spokesperson told the BBC. The agency immediately notified law enforcement.
The spokesperson added that the hacker was able to remotely access several Treasury user workstations and certain unclassified documents that were kept by those users.
The Department did not specify the nature of these files, or when and for how long the hack took place.
The spokesperson said the Treasury Department “takes very seriously all threats against our systems, and the data it holds,” and that it will continue to work on protecting its data from outside threats.
The Department letter states that a supplemental report on the incident will be provided to lawmakers in 30 days.
China has been accused of spying in the past by US officials. It has regularly denied such accusations.
I was suggested this web site by my cousin Im not sure whether this post is written by him as no one else know such detailed about my trouble You are incredible Thanks
I want to take a moment to express my deep appreciation for your incredible work as a blogger. Your passion for writing and your commitment to sharing valuable insights consistently shine through in every post. The way you blend creativity with knowledge makes your content not only informative but also inspiring. Your dedication to providing high-quality articles that resonate with your readers is truly remarkable. You’ve managed to create a space where people can learn, grow, and connect with new ideas, and that’s no small feat. Thank you for your hard work, your unique perspective, and for always delivering content that is both engaging and thought-provoking. Your blog has become a trusted resource, and I am sure many others, like me, are grateful for all the effort you put into each post. Keep up the fantastic work; your contribution to the blogging world is invaluable!
Приятно узнать что-то новое.
butirkaconcert.ru
Рад, что вы это подняли
butirkaconcert.ru
Рекомендую – лучшие скороварки из нержавеющей стали
Hello there, juswt became awaqre off your blog thrrough Google, and
foun that it is truly informative. I am oing to watch out for
brussels. I’ll be grateful if yyou contionue thhis in future.
Manny people will bee benefited fom your writing. Cheers!
Thans for finally talkijg aboutt > US Treasury says itt was hhacked by Chin iin 'major incident' – Hiddn World News < Loved it!