Chinese state-sponsored hackers exploited a vulnerability in a third-party cybersecurity service provider to breach the U.S. Treasury Department's computer systems. The hackers stole unclassified documents, raising concerns about national security.
WASHINGTON - Chinese state-sponsored hackers breached the U.S. Treasury Department 's computer security guardrails this month and stole documents in what Treasury called a 'major incident,' according to a letter to lawmakers that Treasury officials provided to Reuters on Monday. The hackers compromised third-party cybersecurity service provider BeyondTrust and were able to access unclassified documents, the letter said.
According to the letter, hackers 'gained access to a key used by the vendor to secure a cloud-based service used to remotely provide technical support for Treasury Departmental Offices (DO) end users. With access to the stolen key, the threat actor was able to override the service's security, remotely access certain Treasury DO user workstations, and access certain unclassified documents maintained by those users.' Based on available indicators, the incident has been attributed to a China state-sponsored Advanced Persistent Threat (APT) actor, the letter said
CYBERSECURITY HACKING CHINA TREASURY DEPARTMENT DATA BREACH
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
US Treasury Breached by Hackers Tied to Chinese ActorThe US Treasury Department confirmed a major cybersecurity breach earlier this month, stating that a threat actor linked to China gained access to unclassified documents. The breach occurred through a third-party cybersecurity service called BeyondTrust. While the compromised service has been taken offline, the Treasury Department is working with federal agencies to fully understand the extent of the incident.
Read more »
Treasury Department Breached by HackersThe U.S. Treasury Department suffered a major security breach earlier this month, gaining access to sensitive information through a compromised third-party cybersecurity service.
Read more »
Chinese Hackers Breach U.S. Treasury DepartmentChinese hackers gained access to unclassified U.S. Treasury Department workstations through a third-party software provider. The breach was discovered in December 2022 and the compromised service has since been taken offline. There is no evidence of ongoing access to Treasury information.
Read more »
Chinese Hackers Infiltrate US Treasury WorkstationsChinese state-sponsored hackers infiltrated US Treasury workstations, accessing unclassified documents, according to a letter from the Treasury Department to lawmakers. The incident, described as a major cybersecurity event, involved a stolen key used to override security measures on a cloud-based service.
Read more »
Chinese Hackers Breach U.S. Treasury DepartmentChinese hackers gained unauthorized access to several U.S. Treasury Department workstations and unclassified documents via a compromised third-party software provider. The breach was discovered on December 8th, 2022, and the affected service has been taken offline. While the extent of the information compromised remains unclear, the Treasury Department stated that there's no evidence of ongoing access by the threat actors.
Read more »
Chinese Hackers Breach U.S. Treasury SystemsState-sponsored Chinese hackers accessed unclassified documents on U.S. Treasury computers via a third-party software vulnerability.
Read more »