The US Treasury Department experienced a security breach where attackers exploited vulnerabilities in BeyondTrust's remote tech support software, leading to unauthorized access to Treasury computers and certain unclassified documents. Attackers stole an authentication key, compromising unclassified data. The incident was linked to a China state-sponsored APT actor. While the compromised service was taken offline, the breach was classified as a major cybersecurity incident, prompting collaboration with the FBI, CISA, and the intelligence community for investigation.
Source: https://www.wired.com/story/us-treasury-hacked-by-china/
"id": "us-000010925",
"linkid": "us-treasury",
"type": "Breach",
"date": "12/2024",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"