Threat actors entered Treasury Department systems through BeyondTrust. The breach may be related to the Salt Typhoon attacks.

The US Treasury Department notified lawmakers on Monday that a China state-sponsored actor infiltrated Treasury workstations in what officials are describing as a “major incident.”

Treasury says hackers accessed “certain unclassified documents” in a “major” breach, but experts believe the attack’s impacts could prove to be more significant as new details emerge.

Chinese state-sponsored hackers breached the Treasury Department's computer security guardrails this month, according to a letter to lawmakers that Treasury officials provided to Reuters.

A Chinese state-sponsored hacker broke into the US Treasury Department's systems and accessed some unclassified documents.

In early December 2024, the U.S. Department of the Treasury experienced a cybersecurity breach. Though China denies involvement, the breach is attributed to a Chinese state-sponsored Advanced Persistent Threat (APT) actor.

China slammed the U.S. Treasury's sanctions against cybersecurity firm Integrity Technology Group for its alleged role in hacking incidents.

China has slammed a decision by the U.S. Treasury to sanction a Beijing-based cybersecurity company for its alleged role in multiple hacking incidents targeting critical U.S. infrastructure

On Friday, the Treasury Department imposed sanctions on Chinese company Integrity Technology by restricting its access to U.S. property and bank accounts.

China slammed the U.S. Monday for sanctioning a Beijing-based cybersecurity firm allegedly behind a botnet targeting American infrastructure, accusing Washington of “using the issue of cybersecurity to vilify and smear China.