Threat actors entered Treasury Department systems through BeyondTrust. The breach may be related to the Salt Typhoon attacks.

The US Treasury Department notified lawmakers on Monday that a China state-sponsored actor infiltrated Treasury workstations in what officials are describing as a “major incident.”

In a letter sent Monday and shared first with Semafor, Rep. Raja Krishnamoorthi, D-Ill., the top Democrat on the House select committee on China, raised concerns about the breach to Treasury Secretary Janet Yellen and asked for a meeting to discuss the situation by Jan. 15.

Chinese state-sponsored hackers breached the Treasury Department's computer security guardrails this month, according to a letter to lawmakers that Treasury officials provided to Reuters.

A Chinese state-sponsored hacker broke into the US Treasury Department's systems and accessed some unclassified documents.

In early December 2024, the U.S. Department of the Treasury experienced a cybersecurity breach. Though China denies involvement, the breach is attributed to a Chinese state-sponsored Advanced Persistent Threat (APT) actor.

China slammed the U.S. Treasury's sanctions against cybersecurity firm Integrity Technology Group for its alleged role in hacking incidents.

China has slammed a decision by the U.S. Treasury to sanction a Beijing-based cybersecurity company for its alleged role in multiple hacking incidents targeting critical U.S. infrastructure

On Friday, the Treasury Department imposed sanctions on Chinese company Integrity Technology by restricting its access to U.S. property and bank accounts.

China slammed the U.S. Monday for sanctioning a Beijing-based cybersecurity firm allegedly behind a botnet targeting American infrastructure, accusing Washington of “using the issue of cybersecurity to vilify and smear China.