WASHINGTON: The US Treasury Department said Monday that a China state-sponsored actor was behind a cyber breach resulting in access to some of its workstations, according to a letter to Congress seen by AFP.
The incident happened earlier this month, when the actor compromised a third-party cybersecurity service provider and was able to remotely access the Treasury workstations and some unclassified documents, a Treasury spokesperson added.
Treasury contacted the US Cybersecurity and Infrastructure Security Agency after it was alerted of the situation by its provider BeyondTrust, and has been working with law enforcement partners to ascertain the impact.
“The compromised BeyondTrust service has been taken offline and there is no evidence indicating the threat actor has continued access to Treasury systems or information,” the department’s spokesperson said.
In its letter to the leadership of the Senate Banking Committee, the Treasury said: “Based on available indicators, the incident has been attributed to a China state-sponsored Advanced Persistent Threat (APT) actor.”
An APT refers to a cyberattack where an intruder establishes and maintains unauthorized access to a target, remaining undetected for a sustained period of time.
The department did not provide further details on what was affected by the breach, but said more information would be released in a supplemental report at a later date.
“Treasury takes very seriously all threats against our systems, and the data it holds,” the Treasury spokesperson added.
The official said that the department would continue working to protect the US financial system from threats.
Several countries, notably the United States, have voiced alarm in recent years at what they say is Chinese-government-backed hacking activity targeting their governments, militaries and businesses.
Beijing rejects the allegations, and has previously said that it opposes and cracks down on all forms of cyberattacks.
In September, the US Justice Department said it had neutralized a cyber-attack network that affected 200,000 devices worldwide, alleging it was run by hackers backed by the Chinese government.
In February, US authorities also said they had dismantled a network of hackers known as “Volt Typhoon.”
The group was said to be targeting key public sector infrastructure like water treatment plants and transportation systems at the behest of China.
In 2023, tech giant Microsoft said Chinese-based hackers seeking intelligence information breached the email accounts of a number of US government agencies.
The group, Storm-0558, had breached email accounts at approximately 25 organizations and government agencies.
Accounts belonging to the State Department and Commerce Secretary Gina Raimondo were among those hacked in that breach.

NEW YORK: A federal appeals court on Monday upheld a jury verdict ordering President-elect Donald Trump to pay $5 million for sexually abusing and defaming writer E. Jean Carroll.
A New York jury found after a nine-day civil trial last year that the former president had sexually abused Carroll at a Manhattan department store in 1996.
Trump was ordered to pay $2 million for sexual abuse and another $3 million for defaming Carroll, a former advice columnist for Elle magazine.
Trump denied the allegations and appealed the verdict on the grounds that two other women who said Trump had sexually assaulted them too should not have been allowed to testify.
The three-judge panel of the Second US Circuit Court of Appeals disagreed.
“We conclude that Mr. Trump has not demonstrated that the district court erred in any of the challenged rulings,” they said.
“Further, he has not carried his burden to show that any claimed error or combination of claimed errors affected his substantial rights as required to warrant a new trial.”
Carroll was awarded $83 million by another jury in a separate case she brought against Trump.
He has appealed that verdict and Steven Cheung, a Trump spokesman, said the Republican would lodge a further appeal against the $5 million damages awarded in the sexual abuse and defamation case.
“The American People have re-elected President Trump with an overwhelming mandate,” Cheung said in a statement.
“They demand an immediate end to the political weaponization of our justice system and a swift dismissal of all of the Witch Hunts, including the Democrat-funded Carroll Hoax, which will continue to be appealed,” he said.
Two federal cases brought against Trump by special counsel Jack Smith have been dismissed since he won the November 5 presidential election.
Trump was accused of mishandling classified documents after leaving the White House and seeking to overturn the results of the 2020 election but Smith dropped the cases under a Justice Department policy of not prosecuting a sitting president.
Trump was convicted in New York in May of 34 counts of falsifying business records to cover up a hush money payment to porn star Stormy Daniels.
Judge Juan Merchan recently rejected a bid by the president-elect to have his conviction thrown out but has postponed sentencing indefinitely.