Chinese Accused of Hacking US Treasury Dept. Computers

WASHINGTON — A Chinese intelligence agency recently hacked the workstations and unclassified documents of the U.S. Treasury Department, the Biden administration announced Monday.

The hack attack is one of several Chinese-sponsored incidents the U.S. Cybersecurity and Infrastructure Security Agency says have compromised the data privacy of government officials, telecommunications companies and ordinary citizens in the past few months.

A Treasury Department report to Congress this month says the hackers obtained access to a security key that gave them remote access to Treasury Department computers.

The Treasury Department said software service company BeyondTrust notified government officials about the computer breach.

“Based on available indicators, the incident has been attributed to a China state-sponsored Advanced Persistent Threat actor,” a Treasury Department letter to Congress said. “In accordance with Treasury policy, intrusions attributable to an APT are considered a major cybersecurity incident.”

The goal of the hackers appeared to be surveillance rather than an attempt to disrupt the computer systems.

The Treasury Department maintains data on international economic systems, including trade between the United States and China.

The department oversees sanctions against Chinese firms. The sanctions have been applied to Chinese military contractors and other Chinese firms that assist Russia in its war with Ukraine.

In previous attacks, Chinese espionage agents were accused of hacking email accounts of Commerce Secretary Gina Raimondo and phone conversations of President-elect Donald J. Trump, Vice President-elect JD Vance and national security officials.

CISA says China is expanding the hacking beyond government officials and agencies potentially to include any Americans who use the internet or cell phones.

The FBI warned last month that hackers associated with the Chinese government infiltrated major U.S. telecommunications companies as part of “a broad and significant cyber espionage campaign.” Customer call records were some of the information that was stolen.

The FBI has expressed concern that the greater risk is the Chinese could disrupt and perhaps shut down major infrastructure such as telecommunications and power systems.

The Chinese government hit back Tuesday by denying involvement in the cyberattacks.

“We have stated our position many times regarding such groundless accusations that lack evidence,” foreign ministry spokeswoman Mao Ning said at a press conference.

She added that China “has always opposed all forms of hacker attacks, and we are even more opposed to the spread of false information against China for political purposes.”

So far, top U.S. government officials are unconvinced by the Chinese denials. Both Republicans and Democrats have warned China to get the hackers under control.

Sen. Tim Scott, R-S.C., said the Senate Banking Committee is monitoring the hack attack against the Treasury Department.

Steve Yates, a former presidential deputy national security advisor, said he expected a more aggressive policy against Chinese cyberstalking during the upcoming Trump administration.

“That calculus has to change,” Yates said.

The alleged latest Chinese hack comes shortly before the Treasury Department implements new rules in January to limit U.S. investments in artificial intelligence and other technology that China could use to threaten national security.

In addition, the Supreme Court is scheduled to decide soon whether Chinese-owned social media company TikTok should be forced to sell its U.S. assets to avoid risks of unauthorized surveillance of Americans.

You can reach us at [email protected] and follow us on Facebook and Twitter