Get 40% Off
🤯 This Tech Portfolio is up 29% YTD! Join Now to Get April’s Top PicksGet The Picks – Just 99 USD

'Dozens of email accounts' were hacked at U.S. Treasury -Senator Wyden

Published 12/21/2020, 12:47 PM
Updated 12/21/2020, 08:55 PM
© Reuters. Exterior view of SolarWinds headquarters in Austin

© Reuters. Exterior view of SolarWinds headquarters in Austin

By Raphael Satter

WASHINGTON (Reuters) -Dozens of email accounts at the U.S. Treasury Department were compromised by the powerful hackers responsible for a wide-ranging espionage campaign against U.S. government agencies, the office of U.S. Senator Ron Wyden said on Monday.

In a written statement, Wyden's office said that Senate Finance Committee staff were briefed that the hack of the Treasury Department appears to have been a significant one, "the full depth of which isn't known."

Wyden, the most senior Democrat on the committee, said that Microsoft (NASDAQ:MSFT) notified the agency that dozens of email accounts had been compromised and that the hackers also penetrated the systems at Treasury's Departmental Offices division, which is home to its top officials.

"Treasury still does not know all of the actions taken by hackers, or precisely what information was stolen," the statement said, although it added that the Internal Revenue Service said there was no evidence the tax agency was compromised or that taxpayer data was affected.

Wyden's statement carried a considerably more pessimistic tone than the one taken by Treasury Secretary Steven Mnuchin, who told CNBC earlier in the day that "the good news is there has been no damage, nor have we seen any large amounts of information displaced."

"I can assure you, we are completely on top of this," he said.

The Treasury declined to add to Mnuchin's comments, and did not immediately return a message seeking comment on Wyden's statement.

A Wyden aide said the hackers were able to access the Treasury officials' Microsoft-hosted inboxes after taking control of the cryptographic key used by Treasury's "single sign on" infrastructure - a service used in many organizations so that employees can access a variety of services with a single username and password.

The aide quoted Treasury officials as saying Mnuchin's inbox was not among those affected.

Microsoft did not immediately return a message seeking comment.

U.S. governments and cybersecurity experts in several countries are still struggling to get their arms around the breach, which began earlier this year when hackers subverted the Texas-based software company SolarWinds and used the company as a springboard to jump deep into government and corporate networks.

Top U.S. officials - including Secretary of State Mike Pompeo - have blamed Russia for the espionage operation, although some officials and experts have told Reuters it is too soon to know for sure who is behind the breach.

The Kremlin has denied any involvement. Republican President Donald Trump, who has spent much of his term in office defending Russia from various allegations of hacking and interference, downplayed the breach and raised the possibility that China might be involved.

© Reuters. FILE PHOTO: The U.S. Department of the Treasury is seen in Washington, D.C.

Attorney General Bill Barr on Monday became the latest Trump loyalist to break with the outgoing president on the issue, telling a news conference that he agreed with Pompeo's assessment: "It certainly appears to be the Russians but I am not going to discuss it beyond that."

Latest comments

Reuters hackers are suspects
Obviously China could be behind this
Risk Disclosure: Trading in financial instruments and/or cryptocurrencies involves high risks including the risk of losing some, or all, of your investment amount, and may not be suitable for all investors. Prices of cryptocurrencies are extremely volatile and may be affected by external factors such as financial, regulatory or political events. Trading on margin increases the financial risks.
Before deciding to trade in financial instrument or cryptocurrencies you should be fully informed of the risks and costs associated with trading the financial markets, carefully consider your investment objectives, level of experience, and risk appetite, and seek professional advice where needed.
Fusion Media would like to remind you that the data contained in this website is not necessarily real-time nor accurate. The data and prices on the website are not necessarily provided by any market or exchange, but may be provided by market makers, and so prices may not be accurate and may differ from the actual price at any given market, meaning prices are indicative and not appropriate for trading purposes. Fusion Media and any provider of the data contained in this website will not accept liability for any loss or damage as a result of your trading, or your reliance on the information contained within this website.
It is prohibited to use, store, reproduce, display, modify, transmit or distribute the data contained in this website without the explicit prior written permission of Fusion Media and/or the data provider. All intellectual property rights are reserved by the providers and/or the exchange providing the data contained in this website.
Fusion Media may be compensated by the advertisers that appear on the website, based on your interaction with the advertisements or advertisers.
© 2007-2024 - Fusion Media Limited. All Rights Reserved.