BEIJING: Beijing on Tuesday (Dec 31) hit back at accusations that a China state-sponsored actor was behind a cyber breach at the US Treasury Department, calling the claims “groundless”.
The Treasury said the attack resulted in access to some of its workstations, according to a letter to Congress seen by AFP.
According to the Treasury, the incident happened earlier this month, when the actor compromised a third-party cybersecurity service provider and was able to remotely access the workstations and some unclassified documents.
China denied the claims, with the foreign ministry saying Beijing “has always opposed all forms of hacker attacks, and we are even more opposed to the spread of false information against China for political purposes”.
“We have stated our position many times regarding such groundless accusations that lack evidence,” foreign ministry spokeswoman Mao Ning said.
The Treasury contacted the US Cybersecurity and Infrastructure Security Agency after it was alerted of the situation by its provider BeyondTrust, and has been working with law enforcement to ascertain the impact.
“The compromised BeyondTrust service has been taken offline and there is no evidence indicating the threat actor has continued access to Treasury systems or information,” the department’s spokesperson said.
In its letter to the leadership of the Senate Banking Committee, the Treasury said: “Based on available indicators, the incident has been attributed to a China state-sponsored Advanced Persistent Threat (APT) actor.”
An APT refers to a cyberattack where an intruder establishes and maintains unauthorised access to a target, remaining undetected for a sustained period of time.
The department did not provide further details on what was affected by the breach, but said more information would be released in a supplemental report at a later date.
“Treasury takes very seriously all threats against our systems, and the data it holds,” the spokesperson added.
Source: CNA
