US Treasury hacked by China in 'major incident': report

[Hoodat]

BREAKING: US Treasury hacked by China in 'major incident': report

Thomas Stevenson  |  Dec 30, 2024

Hackers from China were able to hack the United States Treasury Department earlier this month and steal documents from workstations at the agency, according to a new report. 

The hackers were able to gain "access to a key used by the vendor to secure a cloud-based service used to remotely provide technical support for Treasury Departmental Offices (DO) end users. With access to the stolen key, the threat actor was able to override the service’s security, remotely access certain Treasury DO user workstations, and access certain unclassified documents maintained by those users," according to a letter sent to lawmakers obtained by Reuters. The hackers were reportedly state-sponsored.

The letter referred to the hack as a "major incident." The New York Times reported that on December 8, software service BeyondTrust informed the agency that the Chinese hacker was able to obtain the security to gain remote access to some workstations at the Treasury Department.  .  .  .

.  .  .  The service that was compromised has since been taken offline and it appears as though the hackers do not have access to more department information.  .  .

https://thepostmillennial.com/breaking-us-treasury-hacked-by-china-in-major-incident-report


And this, boys and girls, is why you do not put anything on 'the cloud'.  Hackers don't need to hack you.  They only need to hack your cloud (which you have zero control over).

[Timber Rattler]

I've got a buddy, a retired USMC officer and high-level government IT manager (GS-15/Senior Executive Service), who's been screaming his head off out in the wilderness about the vulnerability of the country's cyber systems and networks for the past 20 years, and every dire prediction he has made is coming to pass.  It's unbelievable!!!

[MeganC]

I've got a buddy, a retired USMC officer and high-level government IT manager (GS-15/Senior Executive Service), who's been screaming his head off out in the wilderness about the vulnerability of the country's cyber systems and networks for the past 20 years, and every dire prediction he has made is coming to pass.  It's unbelievable!!!

Upper level management in almost every organization has long given little thought to cybersecurity. Only when the ransomware or the data breach hits do they think about security. And then mostly in terms of trying to assign blame.

In the meantime they install every silly "app" on their devices, they embrace the latest fads from China and Russia, and they don't bother with screening their employees and contractors.

Vaya Con Dios mi amigos!