Treasury Department Imposes Sanctions Following Chinese Cyberattack on Telecom Companies and Network Breach

The US Treasury Department has imposed sanctions related to a significant cyberattack by Chinese hackers on American telecommunications firms and its own network. These sanctions target a hacker linked to China's Ministry of State Security, involved in a breach that compromised numerous Treasury Department workstations. A China-based cybersecurity firm with ties to the hacking group Salt Typhoon is also sanctioned for accessing private communications of many Americans.

The US suspects that senior government officials and notable political figures were among those whose communications were intercepted. Deputy Treasury Secretary Adewale Adeyemo stated, "The Treasury Department will continue to use its authorities to hold accountable malicious cyber actors who target the American people, our companies, and the United States government, including those who have targeted the Treasury Department specifically."

Sanctions and Their Implications

The sanctions prevent Yin Kecheng, a Shanghai-based hacker, and Sichuan Juxinhe Network Technology Co. LTD from conducting any business in the US. Earlier this month, the Treasury Department had already sanctioned another Beijing-based cybersecurity company for its alleged involvement in multiple hacking incidents targeting critical US infrastructure.

China has consistently denied these hacking allegations from the US, including those related to the recent Treasury Department breach. The announcement of these sanctions did not reveal new information about the extent of the hack into the Treasury Department's systems.

Details of the Cyber Breach

The Treasury Department became aware of the breach on December 8. A third-party software provider, BeyondTrust, identified that hackers had stolen a key used to secure a cloud-based service for remote technical support. This key allowed hackers to bypass security measures and access several employee workstations remotely.

The breach highlights ongoing cybersecurity challenges faced by government agencies and private companies alike. The US continues to address these threats through sanctions and other measures aimed at holding cybercriminals accountable for their actions.