China-Linked Hackers Breach US Treasury Systems

In a grim disclosure back in December, the U.S. Treasury Department revealed it had suffered a security intrusion attributed to what it called a 'China state-backed Advanced Persistent Threat.' Recent revelations by Bloomberg have shed light on the scale of this illicit access.

This cyber intruder managed to infiltrate over 400 computers, including laptops and desktops. Many of these devices were critical, belonging to top-level officials involved in areas such as sanctions, global affairs, and intelligence processes. User credentials, like usernames and passwords, were compromised along with more than 3,000 documents on unsecured personal machines.

Scope of Data Breach

The vast collection of stolen documents featured sensitive travel information, organizational blueprints, sanctions data, and metrics on foreign investments. Thankfully, a report suggests that while the data loss was considerable, the hackers did not gain access to the Treasury's classified or email networks.

However, the attackers succeeded in accessing documents related to the Committee on Foreign Investment investigations. This committee scrutinizes security risks connected to property and foreign investment acquisitions within the United States.

Insights From The Agency Report

Interestingly, there was no indication of any attempts by the hackers to embed themselves for prolonged intelligence gathering, nor was any malicious software left behind in the Treasury's systems.

The culprits behind this breach have been associated with a feared Chinese state-sponsored hacking faction known under various names: Silk Typhoon, Halfnium, or UNC5221. Evidence infers the incursion took place outside of standard working times to evade detection.

China Responds to Accusations

In response, an official from the Chinese Foreign Ministry refuted the allegations, labeling them as baseless and without merit.

Ongoing Investigations

Currently, counterintelligence teams are engaging in a thorough assessment of the breach's damage. Meanwhile, Treasury staff are preparing to update the Senate Committee on Banking, Housing, and Urban Affairs shortly.