A Chinese state-sponsored actor was behind a cyberattack on the US Treasury department earlier this month, resulting in unauthorized access to some of its workstations, Agence France-Presse reported on Monday, citing a letter to Congress.
The actor compromised a third-party cybersecurity service provider, BeyondTrust. The hackers were able to access workstations and some unclassified documents, but there is no evidence that the entity has continued access to the department’s systems, the report said.
After being alerted by BeyondTrust, the Treasury department contacted the cybersecurity and infrastructure security agency and is collaborating with law enforcement to assess the impact.
The Treasury department and BeyondTrust did not immediately respond to Reuters requests for comment.