Signal
Submitted
Apr 28, 2026, 15:07 UTC
The US Treasury Department reported a China-supported cyberattack in early December 2024 that infiltrated multiple workstations, though no classified documents were compromised.
In early December 2024, the US Treasury Department suffered a cyberattack attributed to a China-supported actor identified as an APT group. Several workstations were infiltrated via a third-party security service provider, BeyondTrust. Although some documents were accessed, none were classified. The Treasury informed the US Congress and is conducting further investigations with security agencies. China denies any involvement and calls the accusations politically motivated. This follows prior accusations by the US, UK, and New Zealand against China for cyberattacks on critical infrastructure and government institutions, including attempts to infiltrate US infrastructure through the state-sponsored hacker group "Volt Typhoon."
Confidence: High
The article explicitly states a China-supported APT cyberattack targeted the US Treasury in December 2024, with direct attribution and official statements, providing clear aggressor activity.
Source URL
https://tagesschau.de/ausland/amerika/usa-china-cyberangriff-100.html
Source reliability
B
Info credibility
3
Event time
Dec 1, 2024, 00:00 UTC
Event time confidence
pm24h
Location
US Treasury Department, Washington, D.C.
Region
District of Columbia
Primary actor
Chinese state-supported actor
Country
United States of America
Countries
United States of America
Tags
China, united states of america, cyberattacks, APT, offensive cyber operations, Treasury Department
Nodes
Node 1: Borders
Signal
Submitted
Apr 28, 2026, 15:07 UTC
The US Treasury Department reported a China-supported cyberattack in early December 2024 that infiltrated multiple workstations, though no classified documents were compromised.
In early December 2024, the US Treasury Department suffered a cyberattack attributed to a China-supported actor identified as an APT group. Several workstations were infiltrated via a third-party security service provider, BeyondTrust. Although some documents were accessed, none were classified. The Treasury informed the US Congress and is conducting further investigations with security agencies. China denies any involvement and calls the accusations politically motivated. This follows prior accusations by the US, UK, and New Zealand against China for cyberattacks on critical infrastructure and government institutions, including attempts to infiltrate US infrastructure through the state-sponsored hacker group "Volt Typhoon."
Confidence: High
The article explicitly states a China-supported APT cyberattack targeted the US Treasury in December 2024, with direct attribution and official statements, providing clear aggressor activity.
Source URL
https://tagesschau.de/ausland/amerika/usa-china-cyberangriff-100.html
Source reliability
B
Info credibility
3
Event time
Dec 1, 2024, 00:00 UTC
Event time confidence
pm24h
Location
US Treasury Department, Washington, D.C.
Region
District of Columbia
Primary actor
Chinese state-supported actor
Country
United States of America
Countries
United States of America
Tags
China, united states of america, cyberattacks, APT, offensive cyber operations, Treasury Department
Nodes
Node 1: Borders