U.S. Treasury Department documents and workstations accessed during cyberattack, The New York Times information. The attack was linked to a “state-sponsored advanced persistent threat actor from China” and has been characterized as “a major cybersecurity incident.”
The cyberattack follows an equally troubling, but separate, breach of U.S. telecommunications carriers that came to light in October 2024. That cyberattack was carried out by a Chinese hacking group known as “Salt Typhoon.” The attackers gained access to unencrypted SMS messages and call logs of politicians, government officials and others for months before the breach was discovered.