Chinese state-sponsored hackers broke into the U.S. Treasury Department this month and stole documents from its workstations, according to a letter to lawmakers, opens new tab that was provided to Reuters on Monday.
The hackers compromised third-party cybersecurity service provider BeyondTrust and were able to access unclassified documents, the letter said, calling it a "major incident."
According to the letter, hackers "gained access to a key used by the vendor to secure a cloud-based service used to remotely provide technical support for Treasury Departmental Offices (DO) end users. With access to the stolen key, the threat actor was able to override the service's security, remotely access certain Treasury DO user workstations, and access certain unclassified documents maintained by those users."
Jump in the discussion.
No email address required.
CLOUD SECURITY ROCKS THX CONSULTANTS
Jump in the discussion.
No email address required.
More options
Context