Credited from: INDIATIMES
In a recent incident of significant concern, Chinese hackers infiltrated the systems of the US Treasury Department and accessed the computers of several top officials, including Treasury Secretary Janet Yellen, Deputy Secretary Wally Adeyemo, and Acting Under Secretary Brad Smith. This breach, which has raised alarms within government circles, was reported by individuals familiar with the matter and indicates that the [source] hackers garnered access to unclassified files, with close to 50 specific files accessed directly from Yellen’s machine.
The attack is part of a broader campaign targeting the Treasury, with the hackers reportedly focusing on sensitive aspects like sanctions, intelligence, and international relations. Notably, the Treasury’s email and classified systems remained undisturbed, as indicated in a Treasury report. Over 400 computers were compromised, revealing employee usernames, passwords, and accessing more than 3,000 files stored on unclassified personal devices. Additionally, sensitive information related to investigations by the Committee on Foreign Investment in the US was subjected to unauthorized access, according to reports from Bloomberg and [India Times].
In light of the breach, Treasury officials conducted briefings with congressional aides while concurrently discussing the confirmation hearing for Scott Bessent, President-elect Donald Trump's nominee for Treasury secretary. This incident not only highlights vulnerabilities in governmental cybersecurity but also raises questions about the implications for national security.
The cyberattack was attributed to a Chinese state-sponsored group known in cybersecurity contexts as Silk Typhoon and UNC5221. Reports suggest that these attackers prioritized document collection and utilize strategies to evade detection by operating outside typical working hours. Their access was gained through a third-party software vendor’s breached systems, demonstrating a potentially severe lapse in cybersecurity protocols.
Commenting on the situation, tech mogul Elon Musk took to social media to mock the breach, insinuating that even youth could breach Yellen's computer systems efficiently. He quipped, “A 12-year-old script kiddie could hack into Yellen’s computer. I doubt she knows how to reboot her WiFi router,” reflecting the widespread concerns over cyber defense capabilities within high government offices.
The Treasury is treating this incident as a major cybersecurity incident, with investigations ongoing to fully understand the scope and the repercussions of this breach, including measures to prevent future attacks. For further details on the hacking, refer to the original articles from SCMP and India Times.