US Treasury

The breach of the US Treasury by Chinese hackers, including 12 individuals indicted by the Department of Justice, resulted in significant data compromise. Over a three-month period, at least 400 PCs were infiltrated leading to the theft of more than 3,000 files. This attack highlights the risk posed by autonomous state-sponsored hacking groups who target and steal sensitive information from high-profile international entities, selling it to government clients for strategic advantages.

Source: https://www.wired.com/story/us-charges-12-alleged-spies-in-chinas-freewheeling-hacker-for-hire-ecosystem/

TPRM report: https://scoringcyber.rankiteo.com/company/us-treasury

"id": "us-000030825",
"linkid": "us-treasury",
"type": "Breach",
"date": "3/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'Government',
                        'location': 'United States',
                        'name': 'US Treasury',
                        'type': 'Government'}],
 'data_breach': {'data_exfiltration': True,
                 'number_of_records_exposed': 'More than 3,000 files',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Sensitive information'},
 'description': 'The breach of the US Treasury by Chinese hackers, including '
                '12 individuals indicted by the Department of Justice, '
                'resulted in significant data compromise. Over a three-month '
                'period, at least 400 PCs were infiltrated leading to the '
                'theft of more than 3,000 files. This attack highlights the '
                'risk posed by autonomous state-sponsored hacking groups who '
                'target and steal sensitive information from high-profile '
                'international entities, selling it to government clients for '
                'strategic advantages.',
 'impact': {'data_compromised': 'More than 3,000 files',
            'systems_affected': 'At least 400 PCs'},
 'initial_access_broker': {'high_value_targets': True,
                           'reconnaissance_period': 'Three-month period'},
 'motivation': ['Espionage', 'Strategic Advantage'],
 'regulatory_compliance': {'legal_actions': ['12 individuals indicted by the '
                                             'Department of Justice']},
 'response': {'law_enforcement_notified': True},
 'threat_actor': 'Chinese state-sponsored hacking groups',
 'title': 'Breach of US Treasury by Chinese Hackers',
 'type': 'Data Breach'}