United States Treasury Service Provider Identified China State-Sponsored Agent as Hacker Accessing End-Users Workstations & Documents, Treasury Notified by 3rd-Party Software Service Provider BeyondTrust on 8th December 2024
1st January 2025 | Hong Kong
The United States Treasury Department service provider has identified China state-sponsored agent as hacker that accessed United States Treasury end-users workstations & documents, with the United States Treasury notified by 3rd-party software service provider BeyondTrust on 8th December 2024. United States Department of Treasury Submission (30/12/24): “In accordance with the requirements of the Federal Information Security Modernization Act of 2014 (FISMA) and criteria provided in Office of Management and Budget (OMB) Memorandum 24-04, this letter provides notice that the Department of the Treasury (Treasury) has determined that a major incident occurred. On December 8, 2024, Treasury was notified by a third-party software service provider, BeyondTrust, that a threat actor had gained access to a key used by the vendor to secure a cloud-based service used to remotely provide technical support for Treasury Departmental Offices (DO) end users. With access to the stolen key, the threat actor was able override the service’s security, remotely access certain Treasury DO user workstations, and access certain unclassified documents maintained by those users. Treasury has been working with the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), the Intelligence Community, and third-party forensic investigators to fully characterize the incident and determine its overall impact. CISA was engaged immediately upon Treasury’s knowledge of the attack, and the remaining governing bodies were contacted as soon as the scope of the attack became evident. Based on available indicators, the incident has been attributed to a China state-sponsored Advanced Persistent Threat (APT) actor. The compromised BeyondTrust service has been taken offline and at this time there is no evidence indicating the threat actor has continued access to Treasury information. The investments we have made using discretionary appropriations provided under the Cybersecurity Enhancement Account (CEA) have helped ensure we have strong incident processes and access to detailed logs to support our incident response efforts. In accordance with Treasury policy, intrusions attributable to an APT are considered a major cybersecurity incident. More details will be made available in our 30-day supplemental report to this notification, which we are required to provide under FISMA and OMB guidance.”
“ United States Treasury Service Provider Identified China State-Sponsored Agent as Hacker Accessing End-Users Workstations & Documents, Treasury Notified by 3rd-Party Software Service Provider BeyondTrust on 8th December 2024 “
![](https://www.caproasia.com/wp-content/uploads/2025/08/Air-Charter-Service-728x90-1.png")
United States Treasury Service Provider Identified China State-Sponsored Agent as Hacker Accessing End-Users Workstations & Documents, Treasury Notified by 3rd-Party Software Service Provider BeyondTrust on 8th December 2024
Caproasia Users
- Manage $20 million to $30 billion of assets
- Invest $3 million to $300 million
- Advise institutions, billionaires, UHNWs & HNWs
Caproasia Platforms | 11,000 Investors & Advisors
- Caproasia.com
- Caproasia Access
- Caproasia Events
- The Financial Centre | Find Services
- Membership
- Family Office Circle
- Professional Investor Circle
- Investor Relations Network
Monthly Roundtable & Networking
Family Office Programs
The 2026 Investment Day
- March - Hong Kong
- March - Singapore
- April - Hong Kong
- April - Singapore
- July - Hong Kong
- July - Singapore
- Sept- Hong Kong
- Sept - Singapore
- Oct- Hong Kong
- Nov - Singapore
- Visit: The Investment Day | Register: Click here
Caproasia Summits
- The Institutional Investor Summit
- The Investment / Alternatives Summit
- The Private Wealth Summit
- The Family Office Summit
- The CEO & Entrepreneur Summit
- The Capital Markets Summit
- The ESG / Sustainable Investment Summit
