Major Cyber Breach at U.S. Treasury Attributed to Chinese Hackers

The U.S. Treasury Department confirmed a significant cyber breach on December 8, attributed to a state-sponsored Chinese hacking operation. This incident allowed hackers to exploit third-party software, gaining access to the desktop computers of Treasury employees. The breach has been classified as a "major incident" by the department, prompting immediate action and investigation.

In a joint effort with the Cybersecurity and Infrastructure Security Agency (CISA), the FBI, and other intelligence community members, the Treasury Department identified the source of the breach as Chinese hackers. The department has since taken the compromised BeyondTrust service offline to prevent further access.

A Treasury spokesperson emphasized that there is “no evidence indicating the threat actor has continued access to Treasury systems or information.” The department has been proactive in addressing cybersecurity threats, stating, "Treasury takes very seriously all threats against our systems, and the data it holds."

Over the past four years, the Treasury has significantly bolstered its cyber defenses, reflecting its commitment to safeguarding sensitive information. The spokesperson added, "We will continue to work with both private and public sector partners to protect our financial system from threat actors."

The breach has also drawn attention from Congress. Senators Sherrod Brown, D-Ohio, and Tim Scott, R-S.C., were informed of the incident, as they oversee the Committee on Banking, Housing, and Urban Affairs. The Treasury Department has committed to releasing a supplemental report on the breach within 30 days.

In response to the allegations, China’s Ministry of Foreign Affairs denied involvement in any state-sponsored hacking activities. Spokesperson Mao Ning stated, "China consistently opposes all forms of hacking and is firmly against the spread of false information targeting China for political purposes."

As investigations continue, the U.S. Treasury remains vigilant in enhancing its cybersecurity protocols. The department's collaboration with law enforcement and intelligence agencies highlights its determination to protect against future threats.