Chinese state-sponsored hackers breached the US treasury department earlier this month, accessing several employee workstations and unclassified documents, according to an agency spokesperson.The breach was orchestrated via a third-party cybersecurity service provider, BeyondTrust.
Hackers were able to gain access to a key used by the vendor to override certain parts of the system, according to a letter the treasury department sent to lawmakers on Monday that was reviewed by the Guardian.
“The compromised BeyondTrust service has been taken offline and there is no evidence indicating the threat actor has continued access to treasury systems or information,” the treasury department spokesperson said.
The hack comes amid reports that Chinese state-sponsored actors also breached three of the largest US telecommunications companies earlier this month. During that breach, called Salt Typhoon, cybercriminals were able to gain access to lawmakers’ phone calls and text messages. Lawmakers across the political spectrum condemned the hack.