
US Treasury says China stole documents in ‘major’ cyberattack
The United States Department of the Treasury has revealed that it was hit by a significant cyberattack earlier in December, which it attributed to Chinese government-backed hackers. The attack resulted in unauthorized access to certain unclassified documents maintained by Treasury employees.
In a letter shared with senior U.S. House lawmakers, the department disclosed that BeyondTrust, a company providing identity access and remote support technology for large organizations and government departments, alerted the Treasury on December 8 about the breach. However, it did not specify how the key was obtained.
The Treasury stated in the letter that it immediately engaged the Cybersecurity and Infrastructure Security Agency (CISA) for assistance. As of December 30, the department reported having “no evidence indicating the threat actor has continued access to Treasury information.”
Notably, the Treasury confirmed that it attributed the breach to a China state-sponsored advanced persistent threat group, suggesting backing from the Chinese government.
The incident is the latest in a string of cyberattacks linked to China targeting the U.S. government in recent months.
Source: techcrunch.com