Chinese state-sponsored hackers have breached the US Treasury Department's computer systems and stolen documents, according to a letter to lawmakers. The hackers exploited a vulnerability in third-party cybersecurity provider BeyondTrust to gain access to unclassified information.
Chinese state-sponsored hackers breached the US Treasury Department's computer security this month and stole documents in what Treasury called a 'major incident,' according to a letter to lawmakers that Treasury officials provided to Reuters on Monday. The hackers compromised third-party cybersecurity service provider BeyondTrust and were able to access unclassified documents.
According to the letter, hackers 'gained access to a key used by the vendor to secure a cloud-based service used to remotely provide technical support for Treasury Departmental Offices (DO) end users. With access to the stolen key, the threat actor was able to override the service's security, remotely access certain Treasury DO user workstations, and access certain unclassified documents maintained by those users.' The Treasury Department said it was alerted to the breach by BeyondTrust on Dec 8 and that it was working with the US Cybersecurity and Infrastructure Security Agency and the FBI to assess the hack's impact. Treasury officials didn't immediately respond to an email seeking further details about the hack. The FBI did not immediately respond to Reuters' requests for comment, while CISA referred questions back to the Treasury Department. A spokesperson for the Chinese Embassy in Washington rejected any responsibility for the hack, saying that Beijing 'firmly opposes the US's smear attacks against China without any factual basis.' A spokesperson for BeyondTrust, based in Johns Creek, Georgia, told Reuters in an email that the company 'previously identified and took measures to address a security incident in early December 2024' involving its remote support product. BeyondTrust 'notified the limited number of customers who were involved,' and law enforcement was notified, the spokesperson said
Cybersecurity Hacking China US Treasury Beyondtrust
Singapore Latest News, Singapore Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Rhode Island hit by data breach as hackers demand ransomHundreds of thousands of Rhode Island residents' personal and bank information, including Social Security numbers, were very likely hacked by an international cybercriminal group asking for a ransom, state officials said on Saturday.
Read more »
'Large number' of Americans' metadata stolen by Chinese hackers, senior official saysWASHINGTON — A large number of Americans' metadata has been stolen in the sweeping cyberespionage campaign carried out by a Chinese hacking group dubbed 'Salt Typhoon,' a senior US official told journalists on Wednesday (Dec 4).
Read more »
US alleges China hacked calls of ‘very senior’ political figures, official saysOctober reports said Trump family members and Biden administration officials had been targeted by China hackers.
Read more »
Hackers Target Chrome Extensions in Widespread CampaignCybersecurity experts have uncovered a campaign targeting Chrome browser extensions used by various companies, compromising sensitive data.
Read more »
$72m embezzlement case: S’porean tycoon charged with criminal breach of trust after 19-year manhuntNg Teck Lee and his wife, Thor Chwee Hwa, fled Singapore in 2005 before they were caught in Malaysia on Dec 3, 2024.
Read more »
Diplomatic storm over breach of Bangladesh mission in India by Hindu protestersTies between the two countries, once a picture of neighbourliness, are at their worst in 15 years.
Read more »