Chinese-backed hacker breaches U.S. Treasury Department via third-party software provider

Traders Union
All News
Crypto
Chinese-backed hacker breaches U.S. Treasury Department via third-party software provider

All news

Top Stories

Editors' Picks

Crypto

Financial News

Currencies

Market Voices

Companies

Regulators

Central Banks

Mirjan Hipolito

31.12.2024

Chinese-backed hacker breaches U.S. Treasury Department via third-party software provider

The U.S. Treasury Department was breached by a Chinese state-backed hacking group, according to a letter sent to Congress on December 30.

The incident, described as a "major cybersecurity event," involved the exploitation of a third-party software provider, BeyondTrust Inc. The hacker gained access to a key used to secure a cloud-based service utilized by the Treasury Department, allowing remote access to certain workstations and unclassified documents. The breach was initially detected on December 8, when BeyondTrust alerted Treasury to the intrusion.

While the Cybersecurity and Infrastructure Security Agency (CISA), FBI, and other agencies have responded, there is no evidence suggesting that the hacker maintained access to Treasury systems following the shutdown of the compromised service. However, the breach highlights ongoing vulnerabilities in federal cybersecurity systems, especially those reliant on third-party vendors with extensive government contracts.

Rising tensions in U.S.-China cybersecurity relations

The attack on the Treasury is the latest in a series of cyber-espionage operations attributed to Chinese state actors. These efforts coincide with ongoing investigations into cyberattacks against U.S. telecom companies, reportedly orchestrated by a group dubbed Salt Typhoon. The U.S. government has raised concerns over the extent of the attacks, which are said to have infiltrated telecom networks for months, collecting sensitive data, including personal communications.

These revelations come at a time of complex diplomatic relations between the U.S. and China, with both countries managing a delicate balance of cooperation and tension. Despite recent agreements on scientific cooperation and a rare prisoner swap, cybersecurity remains a contentious issue. In response to the growing concerns, U.S. officials have vowed to hold Beijing accountable for its actions, with further measures expected in the coming months.

As tensions over cybersecurity intensify, the U.S. government is likely to reevaluate its stance on Chinese technology firms and tighten regulations around third-party software used in sensitive departments. The Treasury hack underscores the need for stronger security protocols and international cooperation to combat state-sponsored cyber threats, which may escalate as technological warfare becomes a key battleground in global geopolitics.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.

Did you like the article?

Chinese-backed hacker breaches U.S. Treasury Department via third-party software provider

Rising tensions in U.S.-China cybersecurity relations

Editor's Picks for You