US Treasury's workstations breached in cyberattack by China, AFP reports

SUMMARY

A Chinese state-sponsored cyberattack on the U.S. Treasury Department earlier this month breached workstations and accessed unclassified documents, according to Agence France-Presse (AFP). The attack exploited vulnerabilities in third-party cybersecurity provider BeyondTrust. Despite the intrusion, there is no evidence of ongoing access to Treasury systems. BeyondTrust notified the Treasury, which then engaged the Cybersecurity and Infrastructure Security Agency (CISA) and law enforcement to investigate and assess the impact. Details emerged through a letter to Congress, emphasizing the role of oversight in exposing significant cyber threats. The breach highlights vulnerabilities in U.S. government agencies and risks associated with third-party service providers. Both the Treasury Department and BeyondTrust have declined to comment, leaving questions about the specifics of the attack.