Name: Chinese Hackers Breached Workstations, Stole Documents, Treasury Department Says
Uploaded: 2025-01-01T05:24:20.000Z
Description: WASHINGTON—Chinese hackers remotely breached the U.S. Treasury Department earlier this month, stealing documents from its workstations, according to a letter the agency sent to lawmakers on Monday. The Treasury Department described the breach as a "major incident."

Cary Dunst is the news anchor for NTD Evening News. He is also the co-host of NTD Good Morning.


Cary Dunst

NTD Plus

News

We present news that is truthful and based on facts, outside of the political fog. Instead of focusing on the negative things happening around us, our mission is to give our viewers a good morning with empathetic and uplifting stories. Our aim is to provide an antidote to negativity by shining a light on the best side of people. We speak to inspiring people who positively impact communities, pursue topics that represent our common human values, and will never miss an opportunity to bring you heartwarming stories.

NTD Good Morning

Trump Has ‘Come to the End of His Rope’ on an Iran Deal: Analyst

Stefania Cox is an NTD News anchor and national correspondent based at the network's global headquarters in New York City. Stefania anchors "NTD Newsroom," and co-anchors "NTD News Today" weekdays at 10:00 am ET.

Stefania Cox

Significant That US, Five Eyes Allies Issue Joint Statement Warning China-Espionage for First Time: Taylor Hathorn

Nikou Bani

Princeton Commemorates 37 Years Since Tiananmen Square Massacre

NTD Newsroom comprises teams of reporters, editors, and producers assigned to cover breaking news and other stories.


NTD Newsroom

Migrant Boat With 240 People Intercepted at Sea

4 Senate Republicans Join Democrats to Defeat the SAVE Act

Zelenskyy Invites Putin for Face-to-Face Talks to End War

Kimberly Hayek is a reporter for The Epoch Times. She covers California news and has worked as an editor and on scene at the U.S.-Mexico border during the 2019 migrant caravan crisis.

Kimberly Hayek

Daniel Monaghan is a reporter for NTD News covering culture, social issues, and education. He holds a BA in Political Science and Government.

Daniel Monaghan

World News

Americas

US Imposes Sanctions on Cuban Leader

Spencer Pratt ‘Has the Wind at His Back’ for LA Mayoral Primary: Democratic Strategist

'Willing to Kill on Industrial Scale’: Tiananmen Massacre Anniversary Illustrates CCP's Nature, Says Author

Dave Martin is NTD's Senior Sports Reporter and sports analyst. He also hosts "Data Hub" segments during NTD's special election coverage, "The Nation Decides."

Dave Martin

Brunson, Knicks Win Again With Late Comeback Over Spurs

NTD Good Morning Full Broadcast (June 5)

NTD Good Morning Full Broadcast (June 4)

NTD Good Morning Full Broadcast (June 3)

NTD Good Morning Full Broadcast (June 2)

NTD Good Morning Full Broadcast (June 1)

NTD Good Morning Full Broadcast (May 29)

NTD Good Morning Full Broadcast (May 28)

NTD Good Morning Full Broadcast (May 27)

NTD Good Morning Full Broadcast (May 26)

NTD Good Morning Full Broadcast (May 25)

The Associated Press is an American not-for-profit news agency headquartered in New York City. 

The Associated Press

US News

State News

California

More Than 17,000 Under Evacuation Orders as Southern California Wildfire Threatens Homes

Rudy Blalock is a Southern California-based daily news reporter for NTD. Originally from Michigan, he moved to California in 2017 and the sunshine and ocean have kept him here since. In his free time, he may be found underwater scuba diving, on top of a mountain hiking or snowboarding, or at home meditating—which helps fuel his active lifestyle.

Rudy Blalock

40,000 Ordered to Evacuate as Chemical Tank Leaks, Threatens Explosion in California

Video of US Fighter Jet Shooting Down UFO Over Lake Huron Emerges in New Pentagon Files

Mary Man is a writer for NTD. She has traveled around the world covering China, international news, and arts and culture.

Mary Man

China News

Epoch Times Obtains Over 2,000 Unseen Tiananmen Square Photos on 37th Anniversary of the June 4th Massacre

News you can trust from the U.S. and around the world. Critical information and insight. We cover the stories that others don’t. NTD News Today airs Monday–Friday at 11 a.m. ET.

NTD News Today

US Embassy in Israel Issues Travel Alert for Much of Middle East

US Government Sues Chick-fil-A Over Religious Rights

Sports News

Kyle Busch, Two-Time NASCAR Champion, Dies at 41

Haika Mrema

Medical Plane Crash in New Mexico Mountains Kills 4, Sparks Wildfire

California Mayor Resigns, Will Plead Guilty to Acting as Chinese Agent

Jill McLaughlin is an award-winning journalist covering politics, environment, and statewide issues. She has been a reporter and editor for newspapers in Oregon, Nevada, and New Mexico. Jill was born in Yosemite National Park and enjoys the majestic outdoors, traveling, golfing, and hiking.

Jill McLaughlin

Scott Pelley Fired by ’60 Minutes’ After Clash With Management

WASHINGTON—Chinese hackers remotely breached the U.S. Treasury Department earlier this month, stealing documents from its workstations, according to a letter the agency sent to lawmakers on Monday. The Treasury Department described the breach as a "major incident."

On Dec. 8, Chinese state-sponsored hackers compromised a third-party software service provider, Beyond Trust, accessing certain unclassified documents, according to the letter by Aditi Hardikar, an assistant Treasury secretary.

The letter stated that the hackers gained "access to a key used by the vendor to secure a cloud-based service used to remotely provide technical support for Treasury Departmental Offices (DO) end users. With access to the stolen key, the threat actor was able to override the service’s security, remotely access certain Treasury DO user workstations, and access certain unclassified documents maintained by those users."

The department did not specify how many workstations had been compromised or what kind of documents the hackers may have obtained. However, in the <a href="https://legacy.www.documentcloud.org/documents/25472740-letter-to-chairman-brown-and-ranking-member-scott/">letter</a>, it said that the BeyondTrust service has been taken offline and “at this time there is no evidence indicating the threat actor has continued access to Treasury information.”

The department said it was working with the FBI and the Cybersecurity and Infrastructure Security Agency to investigate the scope of the hack.

“Treasury takes very seriously all threats against our systems, and the data it holds,” a department spokesperson said in a separate statement to The Associated Press. “Over the last four years, Treasury has significantly bolstered its cyber defense, and we will continue to work with both private and public sector partners to protect our financial system from threat actors.”

The incident occurred as U.S. officials continue to assess the scope of the cybersecurity breach from China’s state-backed Salt Typhoon hacking group, which has carried out a wide-ranging espionage campaign since 2022. Last week, a White House official <a href="https://www.theepochtimes.com/china/us-adds-9th-telecom-victim-list-salt-typhoon-telecom-victims-5782739">announced</a> that the recent cyberattacks affected nine telecom companies, including Verizon, AT&T, and CenturyLink.

Officials said in early December that these hackers are still embedded in U.S. infrastructure. AT&T and Verizon <a href="https://www.theepochtimes.com/us/telecom-providers-say-networks-are-secure-following-chinese-salt-typhoon-hack-5783279">said</a> on Saturday that their networks are now secure while Lumen Technologies, which owns CenturyLink, said on Sunday that it has no evidence of Chinese actors in its network.

Chinese hackers have targeted a small number of high-profile customers, according to AT&T and Verizon.

In the wake of the Salt Typhoon hacking campaign, the Cybersecurity and Infrastructure Security Agency has urged “individuals who are in senior government or senior political positions” to immediately stop using regular phone calls and text messages. They should only use end-to-end encrypted communications and “assume that all communications between mobile devices—including government and personal devices—and internet services are at risk of interception or manipulation,” the agency warned.

The hacking group has already successfully targeted now-Vice President-elect JD Vance and now-president-elect Donald Trump, as well as Vice President Kamala Harris.

<em>Eva Fu, Lily Zhou, Reuters, and The Associated Press contributed to this report.</em>

<em>From <a href="https://www.theepochtimes.com/us/chinese-hackers-breached-workstations-stole-documents-treasury-department-says-5783973">The Epoch Times</a></em>

Latest

Science &amp; Tech

Videos

01_Lead Story

04_Top Stories

Treasury

Latest Clips

Chinese hackers

Management

Emel Akan is a senior White House correspondent for The Epoch Times, where she covers the Biden administration. Prior to this role, she covered the economic policies of the Trump administration. Previously, she worked in the financial sector as an investment banker at JPMorgan. She graduated with a master’s degree in business administration from Georgetown University.

Emel Akan

02_Second Lead

Latest and breaking news, documentaries, movies, and lifestyle content on NTD+.
 
Empower your knowledge and elevate your spirit with NTD+, your go-to destination for truthful news, insightful documentaries, and captivating lifestyle content that enriches your life.