This article is from the source 'bbc' and was first published or seen on . The next check for changes will be

You can find the current article at its original source at https://www.bbc.com/news/articles/c3weye2j0e7o

The article has changed 11 times. There is an RSS feed of changes available.

Version 4 Version 5
US Treasury says it was hacked by China in 'major incident' US Treasury says it was hacked by China in 'major incident'
(about 7 hours later)
A Chinese state-sponsored hacker has broken into the US Treasury Department's systems, accessing employee workstations and some unclassified documents, American officials said on Monday. A Chinese state-sponsored hacker broke into the US Treasury Department's systems earlier this month and was able to access employee workstations and some unclassified documents, American officials said on Monday.
The breach occurred in early December and was made public in a letter penned by the Treasury Department to lawmakers notifying them of the incident. The Treasury Department deemed the breach a "major incident" after disclosing it via a letter notifying lawmakers to the incident.
The US agency characterised the breach as a "major incident", and said it had been working with the FBI and other agencies to investigate the impact. The US agency said it had been working with the FBI and other agencies to investigate the impact of the hack.
A spokesman for the Chinese embassy in Washington DC told BBC News that the accusation is part of a "smear attack" and was made "without any factual basis". A spokesman for the Chinese embassy in Washington DC told BBC News that the accusation was part of a "smear attack" and made "without any factual basis".
The Treasury Department said in its letter to lawmakers that the China-based actor was able to override security via a key used by a third-party service provider that offers remote technical support to its employees. The Treasury Department said in its letter to lawmakers that the China-based actor was able to override security via a key used by a third-party service provider. The application offers remote technical support to its employees.
The compromised third-party service - called BeyondTrust - has since been taken offline, officials said. They added that there is no evidence to suggest the hacker has continued to access Treasury Department information since. The compromised third-party service - called BeyondTrust - has since been taken offline, officials said. There was no evidence to suggest the hacker had continued to access to Treasury Department information since, the statement continued.
Along with the FBI, the department has been working with the Cybersecurity and Infrastructure Security Agency and third-party forensic investigators to determine the breach's overall impact. The department said it had been working with the Cybersecurity and Infrastructure Security Agency and third-party forensic investigators to determine the overall impact.
Based on evidence it has gathered so far, officials said the hack appears to have been carried out by "a China-based Advanced Persistent Threat (APT) actor". Officials said initial investigations suggested the hack appeared to have been carried out by "a China-based Advanced Persistent Threat (APT) actor".
"In accordance with Treasury policy, intrusions attributable to an APT are considered a major cybersecurity incident," Treasury Department officials wrote in their letter to lawmakers. "In accordance with Treasury policy, intrusions attributable to an APT are considered a major cybersecurity incident," Treasury Department officials said.
Millions of Americans caught up in Chinese hacking plot - USMillions of Americans caught up in Chinese hacking plot - US
China hits out at US and UK over cyber hack claimsChina hits out at US and UK over cyber hack claims
The department was made aware of the hack on 8 December by BeyondTrust, a spokesperson told the BBC. According to the company, the suspicious activity was first spotted on 2 December, but it took three days for the company to determine that it had been hacked. The department was made aware of the hack on 8 December by BeyondTrust, a spokesperson told the BBC. According to the company, the suspicious activity was first spotted on 2 December, but it took three days for the company to determine it had been hacked.
The spokesperson added that the hacker was able to remotely access several Treasury user workstations and certain unclassified documents that were kept by those users. The spokesperson said the hacker was able to remotely access several Treasury user workstations and some unclassified documents that were kept by those users.
The department did not specify the nature of these files, or when and for how long the hack took place. They also did not specify the level of confidentiality of the computer systems. For instance, access to 100 low-level workers would likely be less valuable then access to only 10 computers at a higher echelon within the department. The department did not specify the nature of these files, or when and for how long the hack took place. They also did not specify the level of confidentiality of the computer systems or the seniority of the staff whose materials were accessed.
The hackers may have been able to create accounts or change passwords in the three days that they were being watched by BeyondTrust.The hackers may have been able to create accounts or change passwords in the three days that they were being watched by BeyondTrust.
As espionage agents, the hackers are believed to have been seeking information, rather than attempting to steal funds.As espionage agents, the hackers are believed to have been seeking information, rather than attempting to steal funds.
The spokesperson said the Treasury Department "takes very seriously all threats against our systems, and the data it holds", and that it will continue to work on protecting its data from outside threats.The spokesperson said the Treasury Department "takes very seriously all threats against our systems, and the data it holds", and that it will continue to work on protecting its data from outside threats.
The department letter states that a supplemental report on the incident will be provided to lawmakers in 30 days.The department letter states that a supplemental report on the incident will be provided to lawmakers in 30 days.
Chinese embassy spokesman Liu Pengyu denied the department's report, saying in a statement that it can be difficult to trace the origin of hackers.Chinese embassy spokesman Liu Pengyu denied the department's report, saying in a statement that it can be difficult to trace the origin of hackers.
"We hope that relevant parties will adopt a professional and responsible attitude when characterizing cyber incidents, basing their conclusions on sufficient evidence rather than unfounded speculation and accusations," he said."We hope that relevant parties will adopt a professional and responsible attitude when characterizing cyber incidents, basing their conclusions on sufficient evidence rather than unfounded speculation and accusations," he said.
"The US needs to stop using cyber security to smear and slander China, and stop spreading all kinds of disinformation about the so-called Chinese hacking threats.""The US needs to stop using cyber security to smear and slander China, and stop spreading all kinds of disinformation about the so-called Chinese hacking threats."
This is the latest high-profile and embarrassing US breach blamed on Chinese espionage hackers.This is the latest high-profile and embarrassing US breach blamed on Chinese espionage hackers.
It follows another hack of telecoms companies in December that potentially breached phone record data across large swathes of American society.It follows another hack of telecoms companies in December that potentially breached phone record data across large swathes of American society.