The US Treasury Department is calling it a “major incident” following an apparent state-sponsored Chinese hack


  • The US Treasury Department has confirmed that there has been a breach
  • The compromise came through third-party systems, BeyondTrust
  • China has denied any involvement

The US Treasury Department has confirmed that documents were stolen and systems hacked in a cyberattack it has called a “major incident.” The breach occurred through a third-party cybersecurity service provider, BeyondTrust, which enabled remote access to key systems.

This system allowed hackers to gain access that was used by the vendor to overwrite parts of the Treasury Department’s systems, the agency confirmed in a disclosure letter to Congress. The third-party system, which normally provides remote technical support to employees, has now been taken offline.