Threat actors entered Treasury Department systems through BeyondTrust. The breach may be related to the Salt Typhoon attacks.

The Biden administration revealed Monday that China-backed hackers infiltrated the U.S. Treasury Department earlier this month in what officials are calling a "major cybersecurity incident."

In early December 2024, the U.S. Department of the Treasury experienced a cybersecurity breach. Though China denies involvement, the breach is attributed to a Chinese state-sponsored Advanced Persistent Threat (APT) actor.

China slammed the U.S. Treasury's sanctions against cybersecurity firm Integrity Technology Group for its alleged role in hacking incidents.

Ill., the top Democrat on the House select committee on China, raised concerns about the breach to Treasury Secretary Janet Yellen and asked for a meeting to discuss the situation by Jan. 15. A Treasury official told Semafor that the agency has already offered briefings to Congress.