A significant cybersecurity breach has compromised the US Treasury Department, following a hack attributed to a Chinese state-sponsored group. According to officials, the cyber intruders accessed employee workstations and various unclassified documents.
The breach took place in early December and was revealed through a letter from the Treasury Department to lawmakers, informing them of the serious incident.
The Treasury Department disclosed that the attackers circumvented security measures by exploiting a key linked to a third-party service provider tasked with offering remote technical support to the agency’s employees.
Describing the breach as a “major incident,” the US agency has been collaborating with the FBI and other entities to assess the extent and impact of the breach.