The U.S. Treasury Department was hacked by a Chinese state-sponsored actor through a third-party software service provider, in response to a letter the agency sent to Congress on Monday.

The Treasury Department was notified on Dec. 8 by a third-party software provider, BeyondTrust Inc., that a hacker had gained access “to a key used by the provider to secure a cloud-based service used to access from the “To provide remote technical support to finance department offices (DO) end users,” the letter states.

The department is supported by the Cybersecurity and Infrastructure Security Agency, the FBI, the intelligence community and out of doors forensic investigators.

According to the available information, advanced hackers with ties to China were behind the incident, in response to the letter.

The Chinese Embassy in Washington rejects “U.S. slander attacks against China without any factual basis,” it said in an emailed statement. “The US must stop using cybersecurity to denigrate and slander China and stop spreading all kinds of disinformation about the so-called Chinese hacker threat,” it said.

BeyondTrust, which sells managed access software and other cybersecurity products, holds contracts with the federal government price greater than $4 million, in response to government data compiled by Bloomberg. The data shows that along with the Treasury Department, BeyondTrust also does business with the Departments of Defense, the Department of Veterans Affairs and the Department of Justice, amongst other agencies.

A BeyondTrust spokesman said Monday evening that a limited number of shoppers were involved, had been notified and were being offered assistance. The spokesperson added that law enforcement had been contacted and the corporate was supporting the investigation.

The Defense Department, Justice Department and Veterans Affairs Department didn’t immediately reply to separate requests for comment.

The hacker was in a position to remotely access certain Treasury Department workstations and “certain unclassified documents maintained by those users,” the department's letter to Senators Sherrod Brown and Tim Scott said. Scott, a rating member of the Senate Banking, Housing and Urban Affairs Committee, also requested a briefing on the matter, a spokesman for the South Carolina Republican office said Tuesday.

“The compromised BeyondTrust service has been taken offline and there is no evidence that the threat actor continued to have access to Treasury systems or information,” a Treasury spokesperson said.

The breach disclosure comes because the White House continues to analyze what it says is an intensive cyber espionage campaign by state-sponsored Chinese hackers against U.S. telecommunications corporations. On Friday, the White House said nine telecommunications corporations were affected by the attacks, which were carried out by a bunch owned by Microsoft Corp. nicknamed Salt Typhoon.

The hackers reportedly spent months lurking in American telecommunications networks and collecting details about an unknown variety of phone calls and text messages from Americans. Among the targeted phones were those of then-presidential candidate Donald Trump and his running mate JD Vance, Trump relations and members of Vice President Kamala Harris' campaign team and others, the New York Times reported.

The alleged Chinese espionage efforts at U.S. telecommunications corporations and the Treasury Department come after a period of relative calm in U.S.-China relations in the ultimate stretch of President Joe Biden's administration.

These included the meeting between Biden and Chinese leader Xi Jinping on the APEC summit in Peru last month, a rare prisoner exchange in late November and a renewed agreement earlier this month on cooperation in science and technology.

The Salt Typhoon telecommunications hack got here up on the meeting in Peru, where Biden “made it very clear where the U.S. stands on this,” national security adviser Jake Sullivan said on the time. Xi told Biden on the meeting: “There is no evidence to support the irrational claim of so-called 'cyber attacks from China,'” the Washington embassy said on Monday.

Anne Neuberger, the deputy national security adviser for cyber and emerging technologies, said last week that the administration planned further actions to carry Beijing accountable after pushing forward a ban on China Telecom within the United States.

Originally published: December 31, 2024 at 10:14 am PST

Why are so many individuals concerned about this bill?

I imagine this is an element of a method to discourage resistance to Republican policies and encourage self-censorship. In this manner, the Republican Party seeks to limit the speech and actions of activists and nonprofits. And essentially, it's a threat to President-elect Donald Trump's political opponents.

Such a law could grow to be a blunt sword that could be used against anyone.

I'm not the just one who thinks like that. U.S. Rep. Jamie Raskina Democrat who was previously a Professor of constitutional lawHe called the bill “a werewolf in sheep’s clothing.” Noting that “supporting terrorists is already a crime,” Raskin warned that this bill could end in “undoing” all due process rights.

Several nonpartisan groups and associations representing a wide selection of nonprofit organizations, including the Council on Foundations, the Independent Sector, the National Council of Nonprofits and the United Philanthropy Forum, issued a joint statement who condemned the measure before its passage within the House of Representatives. The groups said they were concerned it will “give the executive branch sweeping new powers that could be abused.”

What do you think that “terrorism” means on this context?

An earlier version of this laws was introduced in December 2023 and passed within the House of Representatives in April 2024. Because of the timing, it has been widely interpreted as one Attempt to quell widespread protests by students and others who expressed their solidarity with the Palestinians and their objections to Israel's military operations in Gaza.

But this laws could do rather more than that, because it doesn’t distinguish between foreign and domestic terrorism – whether it’s real or conceited.

To date, the Treasury Department has taken great care in defining domestic terrorism Observation on his website that the Constitution and U.S. laws “protect a wide range of expression—even expression with which many may disagree or find abhorrent, and even expression that certain foreign allies and partners of the United States prohibit under their own laws and criminalize.”

Under U.S. law, the Treasury Department is required to stay impartial in all interactions with tax-exempt organizations.

Therefore, making it easier for federal authorities to label a nonprofit organization as “terrorist” could be a significant departure from American traditions. It might be that the term is becoming a type of political rhetoric aimed toward intimidating activists, including those staging campus protests.

The lack of a transparent definition within the laws would depart room for interpretation. It's not clear who must be held liable – it could even be the nonprofits' donors.

Constitutional protections may find yourself protecting people caught up in these allegations, but there's no approach to understand how far which may go or how much it would upend their livelihoods as they defend themselves.

What other concerns do you’ve gotten?

This bill jogs my memory of what is occurring around the globe in countries where support for democratic principles is declining right-wing governments Are Restriction of dissenting opinions.

I’m currently working with Jennifer AlexanderProfessor of public administration on the University of Texas at San Antonio, on an article about this trend and the way it pertains to what’s already happening in lots of US states. We have found that this pattern is most prevalent where the Republican Party has full control of presidency – the GOP occupies the governor's mansion and has a majority in each legislative chambers.

We found that no less than 22 states have each passed recent laws to limit protests or tightened laws that were already in force, increasing the severity of possible punishments. These laws restrict public advocacy and organizing.

I can imagine it getting used to handle environmental protests like those in Atlanta against the development of a police training center in an urban forest or in Atlanta North Dakotaagainst the development of an oil pipeline.

Such a measure could lead on to harsher crackdowns if there’s a brand new wave of Black Lives Matter protests much like those in 2020, which followed the murder of George Floyd. Many of those demonstrations were organized by nonprofit groups.

In Texas, state authorities have tried to do that Shut down charities that support immigrantswhich led to an outcry from civil rights groups.

And Indiana Attorney General Todd Rokita has launched an investigation into firms and nonprofits which have done this, including the God Is Good Foundation allegedly conspiring to bring non-citizens into the state.

What do you think that would occur if this measure became law?

I imagine that folks who intend to proceed mass mobilization organized by nonprofits might determine to go underground—to avoid the repercussions of an activity that I imagine is clearly protected by the U.S. Constitution .

Even without this measure becoming law, it has grow to be possible for one Liability of the organizer for damage or injuries that occurred during an indication – even in the event that they themselves weren’t involved in violence or destruction.

Officially labeling a company as “terrorist” could be very effective. If this were to occur, a portion of the population would never see this group otherwise again.

Many authoritarian regimes prefer to use it This propaganda tool is used since it causes the general public to distrust these organizations. It places these organizations outside acceptable norms of civic engagement, although nonprofits' rights to freedom of speech, assembly, and petition are enshrined within the First Amendment.