Chinese Cyberattack Targets US Treasury: Workstations Compromised, Documents Accessed

Washington: In a ‘major incident’ of a cyberattack, a Chinese state-sponsored actor gained access to US Treasury workstations and unclassified documents, the US Treasury Department notified Congress on Monday (local time).

In a letter reviewed by CNN, a US Treasury official revealed that a Chinese state-sponsored Advanced Persistent Threat (APT) actor used a stolen key to remotely access certain Treasury workstations and unclassified documents, as informed by a third-party software service provider on December 8.

“Based on available indicators, the incident has been attributed to a Chinese state-sponsored Advanced Persistent Threat (APT) actor,” Aditi Hardikar, assistant secretary for management at the US Treasury, wrote in the letter.

A US Treasury spokesperson told CNN that the compromised service has been taken offline and steps are being taken in coordination with law enforcement and the Cybersecurity and Infrastructure Security Agency (CISA). “There is no evidence indicating the threat actor has continued access to Treasury systems or information,” the Treasury spokesperson said.

According to CNN, Treasury officials are likely to hold a classified briefing next week with the House Financial Services Committee to analyze the breach. However, the exact timing of the briefing is yet to be decided, a senior committee staffer informed CNN.

The third-party software service provider, BeyondTrust, stated that hackers gained access to a key used by the vendor to secure a cloud-based service that the Treasury Department uses for technical support, according to the letter addressed to Senate Banking Committee leadership. (ANI)

Also Read: Taliban bars women from looking out of windows: Spokesperson Zabihullah Mujahid

Also Watch: