China-linked hackers accessed over 400 US Treasury computers

The US Treasury Department announced in a letter back in December that it had been the victim of a security breach, attributing it to a “China state-sponsored Advanced Persistent Threat actor.” Now we know more about the extent of the hack, thanks to reporting by Bloomberg.

The hacking group got into more than 400 laptop and desktop computers, many of which were linked to senior leaders focused on “sanctions, international affairs and intelligence.” They also accessed employee usernames and passwords, in addition to more than 3,000 files on unclassified personal computers. These documents included travel data, organizational charts, sanction materials and foreign investment metrics.

An agency report indicates that the perpetrators likely stole a whole lot of this data, but were unable to get into the Treasury’s classified or email systems. The hackers did access materials regarding investigations run by the Committee on Foreign Investment. This committee reviews security implications surrounding real estate purchases and foreign investments in the US.

The agency report also notes that there wasn’t any evidence to suggest that the hackers tried to hide in the Treasury’s systems for the purpose of long-term intelligence gathering, and they didn’t leave behind any malware.

China reacts on ‘Treasury-Hack’ pic.twitter.com/7j7OaQ6eKD

— Willem Middelkoop (@wmiddelkoop) January 2, 2025

Investigators have attributed the intrusion to a notorious Chinese state-sponsored hacking group called Silk Typhoon, Halfnium or UNC5221. It has been suggested that they performed the hack outside of normal working hours to avoid detection. Last month, a spokesperson for the Chinese Foreign Ministry called the accusation that the attack was state-sponsored “unwarranted and groundless.”

Counterintelligence officials are still in the midst of a “comprehensive damage assessment” but Treasury employees are set to brief the Senate Committee on Banking, Housing and Urban Affairs on the matter this week.

This article originally appeared on Engadget at https://www.engadget.com/cybersecurity/china-linked-hackers-accessed-over-400-us-treasury-computers-182420268.html?src=rss https://www.engadget.com/cybersecurity/china-linked-hackers-accessed-over-400-us-treasury-computers-182420268.html?src=rss
Created 10h | Jan 16, 2025, 8:10:15 PM


Login to add comment

Other posts in this group

SpaceX's Starship explodes during ascent in its seventh test flight

The Starship's seventh test flight ended in an explosion when the vehicle's upper stage "experienced a rapid unscheduled disassembly during its ascent burn" over the Atlantic Ocean. SpaceX chief El

Jan 17, 2025, 5:20:13 AM | Engadget
Here's how to pre-order the PS5 Midnight Black accessories

Pre-orders are now open for four new PlayStation 5 accessories in a new colorway: Midnight Black. That's better than other types of black because it stays up past bedtime. The collection includes t

Jan 17, 2025, 3:10:06 AM | Engadget
Everyone suddenly has cold feet about banning TikTok

With a TikTok ban seemingly imminent, TikTok users have spent the last few days fleeing to Chinese social media app “

Jan 17, 2025, 12:40:11 AM | Engadget
FTC bans General Motors from selling driver data for five years

The Federal Trade Commission has taken action against General Motors and OnStar for allegedly sharing details about drivers to third parties without their consent. The agency launched an investigat

Jan 17, 2025, 12:40:10 AM | Engadget
Google decides it won't comply with EU fact-checking law

Google has told the EU it will not comply with a forthcoming fact-checking law, according to a copy of a let

Jan 16, 2025, 10:30:05 PM | Engadget
CFPB fines Block $175m over Cash App's lax fraud controls

The Consumer Financial Protection Bureau (CFPB) announced today that's

Jan 16, 2025, 10:30:04 PM | Engadget
AGDQ just ended, but there's already a schedule for Frost Fatales and it owns

Awesome Games Done Quick has already wrapped up for 2025 (with a cool

Jan 16, 2025, 10:30:03 PM | Engadget