Treasury Department officials confirmed that a state-sponsored Chinese hacking group exploited third-party software to gain access to department computers, describing this as a “major incident.”
Officials were notified of the breach on Dec. 8. During the breach, the group remotely infiltrated the Treasury’s cloud service and workstations to acquire unclassified documents.
The Treasury has collaborated with the FBI, CISA, and the intelligence community to investigate the breach and assess its impact, according to officials.
One security expert described the technique of exploiting third-party services as a prominent method used by China-linked groups.
