US Treasury breached via remote support service, internal documents accessed
The US Department of the Treasury suffered unauthorised access to workstations and internal documents through a breach of a remote support service. The attackers used an API key stolen from the BeyondTrust remote support service, and the Office of Foreign Assets Control and the Office of Financial Research were also confirmed as affected. The US linked the attack to the China-linked Silk Typhoon group and announced actions against the cyber actors involved, whilst China denied involvement.
Key facts
- Affected organisation
- US Department of the Treasury
- Incident type
- Hacking & intrusion
- Occurred / detected
- Not confirmed
- Scale of damage
- Unauthorised access to workstations and internal documents; Office of Foreign Assets Control and Office of Financial Research affected
- Cause / method
- Intrusion using a stolen API key for the BeyondTrust remote support service
- Location
- United States
Timeline
- The US Treasury disclosed unauthorised access to computers and documents by China-linked attackers.
- China denied involvement in the cyber-attack on the US Treasury.
- It was reported that computers of senior US Treasury officials had also been accessed.
- The US Cybersecurity and Infrastructure Security Agency said the scope of the government breach was limited to the Treasury.
- It was reported that the attack was linked to Silk Typhoon, that a stolen API key was used, and that the Office of Foreign Assets Control and the Office of Financial Research were also affected.
- The US State Department announced actions against China-linked cyber actors connected to the Treasury hack and Salt Typhoon.
33 related reports
- US Treasury says China accessed government documents in ‘major’ cyberattack
- Chinese hackers breach US treasury network, gain access to some files
- China Hacked Treasury Dept. in ‘Major’ Breach, U.S. Says (Published 2024)
- US Treasury Department Admits It Got Hacked by China
- U.S. Treasury says its computers were hacked by a Chinese 'threat actor' in a 'major incident'
- China hacked U.S. Treasury Department to access workstations and documents, agency says
- China blamed by US for Treasury Department hack
- US Treasury says it was targeted by China state-sponsored cyberattack
- US Treasury says it was hacked by China in 'major incident'
- US Treasury Department breached through remote support platform
- US Treasury says Chinese hackers stole documents in 'major incident'
- Beijing denies involvement in US treasury cyber-attack
- Beijing’s rising cyberattacks underscore importance of global cooperation
- China slams ‘groundless’ claims of cyberattack on US Treasury
- Cyberattack Targets US Treasury: Workstations Compromised, Unclassified Documents Accessed by Chinese
- What Happened in the U.S. Department of the Treasury Breach? A Detailed Summary
- Treasury Department breached through BeyondTrust service
- U.S. Treasury says it was hacked by China-backed intruder
- Treasury says Chinese hackers remotely accessed documents in 'major' cyber incident
- Treasury Department Systems Hacked by China, Reports Say
- Chinese hackers break into US Treasury and steal documents
- US Treasury hacked: Are China and the US stepping up their cyberwar?
- Treasury’s sanctions office hacked by Chinese government, officials say
- Chinese hack of US Treasury breached sanctions office, Washington Post says
- CyberArk Stock Rises After Treasury Department Hack Hits Rival
- Computers of Senior US Treasury Leaders Accessed in Latest Hack
- Allegations of hack on US Treasury ‘unfounded’, appear to be politically motivated: expert
- China Hacked Treasury’s Sanctions Office
- CISA says recent government hack limited to US Treasury
- US Treasury hack linked to Silk Typhoon Chinese state hackers
- In Other News: Bank of America Warns of Data Breach, Trucking Cybersecurity, Treasury Hack Linked to Silk Typhoon
- U.S. Takes Action Against PRC-Linked Cyber Actors for Treasury Hack and Salt Typhoon
- Treasury Department hacked: Explaining how it happened
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.