U.S. Treasury says Chinese hackers access unclassified documents in major cyberattack
The US Treasury Department has now officially confirmed that it had suffered a significant cybersecurity breach earlier this month, one that has been attributed to a Chinese state-sponsored hacking group. The breach, which was first disclosed in a letter to lawmakers on December 29, enabled the attackers to remotely access sensitive workstations and unclassified documents through a third-party service provider, BeyondTrust, which manages remote technical support services for government agencies. BeyondTrust had informed the Treasury Department that hackers had compromised a key used to secure its cloud-based service (which has since been revoked, and BeyondTrust suspended the impacted instances of its service). This service is used by the Treasury to allow technical support staff to remotely access and troubleshoot workstations of departmental employees. With the stolen key, the attackers were able to gain unauthorized access to certain workstations. While BeyondTrust has not discl...