US Treasury says Chinese hackers stole documents in 'major incident'

Chinese hackers breached U.S. Treasury Department systems in December 2024:
Accessed unclassified documents via compromised BeyondTrust security key
Breach classified as "major incident" by Treasury
Attributed to Chinese state-sponsored APT group
Discovered December 8; under investigation by CISA and FBI
BEYONDTRUST RESPONSE:
Acknowledged security incident affecting remote support product
Notified affected customers and law enforcement
Posted public statement December 8, updated December 18
China denied responsibility, calling U.S. claims "smear attacks without factual basis." Security experts note incident matches typical Chinese state-sponsored hacking patterns, particularly targeting trusted third-party services.