The US Treasury Department recently disclosed a significant cybersecurity incident involving a China state-sponsored actor infiltrating Treasury workstations. The breach was discovered when a third-party software service provider notified the Treasury on December 8 that a threat actor had gained unauthorized access using a stolen key to certain workstations and unclassified documents.
According to Treasury officials, the incident has been attributed to a Chinese state-sponsored Advanced Persistent Threat (APT) actor. The compromised service has since been taken offline, and the Treasury is collaborating with law enforcement and the Cybersecurity and Infrastructure Security Agency (CISA) to address the breach.
