December 30th, 2024

US treasury's workstations breached in cyber-attack by China – report

Chinese state-sponsored hackers breached the US Treasury Department via a third-party provider, accessing unclassified documents. The Treasury has secured its systems and engaged federal agencies to investigate the incident.

Read original articleLink Icon
US treasury's workstations breached in cyber-attack by China – report

Chinese state-sponsored hackers breached the US Treasury Department's network, accessing several employee workstations and unclassified documents. The breach occurred through a compromised third-party cybersecurity provider, BeyondTrust, which allowed hackers to obtain a key to override certain system protections. The Treasury Department confirmed that the compromised service has been taken offline and stated there is no evidence of ongoing access to its systems. This incident follows reports of similar breaches involving major US telecommunications companies, where hackers accessed sensitive communications of lawmakers. In response to the breach, the Treasury Department has engaged the Cybersecurity and Infrastructure Security Agency (CISA), the FBI, and forensic investigators to assess the situation. BeyondTrust acknowledged a security incident affecting a limited number of its customers and is currently investigating the matter. The Chinese embassy in Washington denied any involvement, criticizing the US for making unfounded accusations.

- Chinese hackers accessed the US Treasury Department's network through a third-party provider.

- The breach involved unclassified documents and employee workstations.

- The Treasury Department has taken measures to secure its systems post-breach.

- Similar hacking incidents have targeted major US telecommunications companies.

- The Chinese embassy rejected allegations of involvement in the cyberattack.

Link Icon 2 comments
By @gnabgib - 4 months
Original source - more detail including link to a source, and without the CISA initialism mistake (19 points, no discussion) https://news.ycombinator.com/item?id=42553154

The letter: https://legacy.www.documentcloud.org/documents/25472740-lett...

By @ChrisArchitect - 4 months