CISA says ‘no indication’ of wider government hack beyond Treasury

U.S. cybersecurity agency CISA said in a brief statement Monday that there is “no indication” that any other U.S. federal agency was hacked during a recent cyberattack at the U.S. Treasury Department in December.

The Treasury confirmed the breach on December 30, attributing the intrusion to China government-backed hackers, telling senior U.S. lawmakers in a letter that the hackers had remote access to Treasury employee workstations and access to unclassified documents. The letter said the hackers obtained a private key from one of its technology vendors, BeyondTrust, which the department uses for remote technical support. It’s not yet clear how the BeyondTrust key was stolen. The Washington Post reported last week that the hackers specifically targeted the Treasury’s global sanctions office.

A spokesperson for the Chinese government in Washington D.C. previously denied the allegations.

In its statement Monday, CISA said it “continues to monitor the situation and coordinate with relevant federal authorities to ensure a comprehensive response” following the Treasury cyberattack.