Lawmakers Demand Answers Following US Treasury Department Cybersecurity Breach
Two Republican lawmakers are pressing the US Treasury Department for clarity on a cybersecurity breach attributed to a Chinese state-sponsored entity that gained access to employee workstations.
In a letter dated Dec. 31, Senator Tim Scott, a member of the Senate Banking Committee, and Representative French Hill, vice chair of the House Financial Services Committee, demanded a congressional briefing on the incident by Jan. 10.
Concerns Over Access to Sensitive Information
The lawmakers described the US Treasury Department breach as “extremely concerning,” emphasizing the critical nature of the data held by the Treasury. They highlighted that the department’s systems contain highly sensitive information, including tax records, business ownership details, and suspicious activity reports. Such data, they stressed, could be targeted by foreign adversaries for malicious purposes.
“This breach of federal government information is extremely concerning,†they wrote. “As you know, Treasury maintains some of the most highly sensitive information on U.S. persons throughout government.†The lawmakers added that the breach underscores “serious questions” about the effectiveness of protocols safeguarding sensitive information.
Details of the US Treasury Department Breach and Response
The incident, which occurred on Dec. 2, 2024, allowed an advanced persistent threat (APT) actor linked to the Chinese Communist Party (CCP) to access certain unclassified documents. US Treasury Department officials confirmed the attribution to the Chinese state-sponsored group in a Dec. 30 letter, stating that a supplemental report would follow within 30 days as mandated by the Federal Information Security Modernization Act (FISMA).
The lawmakers’ letter urged US Treasury Department Secretary Janet Yellen to provide specific details about the breach, including:
- The scope of information accessed by the hackers.
- The methods employed to infiltrate the Treasury’s systems.
- Steps taken to prevent future incidents.
International Implications and China’s Denial
China has denied involvement in the breach, with a spokesperson telling Reuters, China “firmly opposes the US’s smear attacks against China without any factual basis.†The breach adds tension to an already strained US-China relationship, particularly regarding cybersecurity and surveillance.
Calls for Enhanced Cybersecurity Measures
Scott and Hill brought attention to the need for robust cybersecurity defenses to prevent such breaches from recurring. “The fact that a CCP-sponsored APT actor was able to access Treasury’s information systems is unacceptable,” they wrote. They also stressed that safeguarding sensitive federal data from foreign adversaries must remain a top priority.
Also read: Solana Ecosystem Welcomes Major Airdrops in January
The incident serves as a stark reminder of the increasing sophistication of state-sponsored cyberattacks and the vulnerabilities within critical US government systems. The outcome of the Treasury’s supplemental report and the upcoming congressional briefing will likely shape future cybersecurity strategies to mitigate such risks.
