Categories: TECH

The US Treasury Department was hacked


The US Treasury Department suffered a “major” security incident after a China state-sponsored hacker broke into the third-party remote management software it uses, as reported earlier by The New York Times.

In a letter to lawmakers seen by The Verge, the Treasury Department said BeyondTrust, the company behind its remote management software, notified the agency of a breach on December 8th.

The threat actor stole a key used by BeyondTrust “to secure a cloud-based service used to remotely provide technical support for Treasury Departmental Offices (DO) end users.” With the key, they overrode the security to remotely access those users’ workstations and “some unclassified documents” they maintained.

The Treasury Department said it worked with the Cybersecurity and Infrastructure Security Agency (CISA) and the FBI following the attack, which has been attributed to a China state-sponsored Advanced Persistent Threat (APT) hacker. “The compromised BeyondTrust service has been taken offline and there is no evidence indicating the threat actor has continued access to Treasury systems or information,” US Treasury Department spokesperson Michael Gwin said in a statement to The Verge.

The attack seems to be linked to a security incident BeyondTrust disclosed earlier this month, impacting customers using its remote support software. At the time, BeyondTrust attributed the attack to a compromised API key for its remote support software, adding that it “immediately revoked the API key, notified known impacted customers, and suspended those instances the same day.” The Verge reached out to BeyondTrust with a request for comment but didn’t immediately hear back.

“Treasury takes very seriously all threats against our systems, and the data it holds,” Gwin said. “Over the last four years, Treasury has significantly bolstered its cyber defense, and we will continue to work with both private and public sector partners to protect our financial system from threat actors.”



Source link

Mainedigitalnews.com

Share
Published by
Mainedigitalnews.com

Recent Posts

Outstanding service from start to finish

Submitted by Logan on 07/18/2025 Outstanding service from start to finish I was…

20 hours ago

My new favorite spot – Reviews of Keratin Treatment NYC on AiLOQ.com

Submitted by SaloonStorm on 07/20/2025 My new favorite spot Been coming here for…

20 hours ago

Syria sees ‘cautious calm’ in Suweida after deadly clashes

A "cautious calm" has returned to the Syrian city of Suweida after a week of…

1 day ago

DEA’s Cannabis Cartel: A Federal Marijuana Scam That Sabotaged Science, Blocked Patients, and Protected Power

As thousands suffer without access to FDA-approved cannabis treatments, MMJ BioPharma Cultivation is waging a…

1 day ago

Thoughts on the 2025-2026 NY Rangers schedule

Live From the Blue Seats is back as Dave, Rob, and producer JL talk the…

1 day ago

GENIUS Act Blocks Big Tech From Dominating Stablecoins: Circle Exec

The GENIUS Act contains a little-noticed clause that prevents technology giants and Wall Street behemoths…

1 day ago