China hacked US Treasury’s CFIUS, which reviews foreign investments for national security risks

Chinese government-linked hackers (identified as Silk Typhoon / Hafnium) breached U.S. Treasury systems by using a stolen BeyondTrust remote access key, compromising the Committee on Foreign Investment in the United States (CFIUS) and the Office of Foreign Assets Control (OFAC), and allegedly stealing documents; the incident is tied to a broader China-backed Typhoon family campaign and involves a supply-chain compromise of a security vendor, while U.S. agencies report no indication the intrusion spread beyond the Treasury.