
Chinese state-sponsored hackers breached computers belonging to senior U.S. Treasury Department officials in a significant cybersecurity attack. The hackers accessed unclassified files, including policy drafts, travel itineraries, and internal communications. The breach targeted over 100 government devices, facilitated by vulnerabilities in software provided by BeyondTrust Inc., a Georgia-based cybersecurity vendor.
Although Treasury’s classified systems and email remained secure, the incident exposed critical documents potentially valuable to China’s geopolitical interests. Notably, the hackers accessed files from offices central to economic sanctions and policy decisions, areas of keen interest to China amid ongoing U.S.-China tensions over trade and Russia’s war in Ukraine.
Chinese officials denied involvement, calling U.S. accusations baseless. Treasury Secretary Janet Yellen’s prior warnings against Chinese firms financing Russian trade underscore the sensitive nature of the accessed data. BeyondTrust has since secured its systems and is cooperating with investigations, but concerns remain over potential security lapses affecting other federal agencies.
This breach highlights the growing risk of cyberattacks against U.S. agencies, emphasizing the need for robust cybersecurity measures to protect sensitive information in increasingly complex digital environments.