INFO:

The Treasury Department was breached by a China-sponsored actor earlier this month, officials told Congress in a letter on Monday. The "major" breach was achieved by gaining access to a third-party cybersecurity service Treasury used, called BeyondTrust, they said. The threat actor was able to "override the service's security, remotely access certain Treasury DO user workstations, and access certain unclassified documents maintained by those users," the letter said.