Third-party cybersecurity provider was compromised after hackers obtained key to override certain systems
Chinese state-sponsored hackers breached the US treasury department earlier this month, accessing several employee workstations and unclassified documents, according to an agency spokesperson.
The breach was orchestrated via a third-party cybersecurity service provider, BeyondTrust. Hackers were able to gain access to a key used by the vendor to override certain parts of the system, according to a letter the treasury department sent to lawmakers on Monday that was reviewed by the Guardian.
More Stories
Ripe for the picking? Irish wine on the up – but ‘nobody will retire rich’
Russian gas shutdown forces closure of almost all industry in Transnistria
Nick Clegg has sold almost $19m in Meta shares since joining Facebook in 2018