Chinese hackers accessed workstations and documents in a ‘major’ cyber incident, Treasury says
apnews.com
The Treasury Department says Chinese hackers remotely accessed several employee workstations and unclassified documents after compromising a third-party software service provider.

Summary

Chinese hackers breached several U.S. Treasury Department workstations and accessed unclassified documents via a compromised third-party software provider, BeyondTrust, officials revealed.

The breach was discovered on December 8 after hackers stole a key allowing remote access. There is no evidence of ongoing access and that the compromised service has been taken offline.

The FBI and Cybersecurity and Infrastructure Security Agency are investigating.

The hack highlights persistent vulnerabilities in supply chain security.