Chinese hackers targeted email systems of US congressional staff, people familiar say

"Chinese hackers targeted the email inboxes of staff working in several House of Representatives committees, according to two people with knowledge of the matter. The people declined to disclose details of specific committees affected because an investigation into the intrusions is early and ongoing. They requested anonymity because they were not authorized to speak publicly about the matter."

"The Financial Times first reported details of the hacking attempts and said committees including foreign affairs, intelligence and armed services were impacted. FT said Salt Typhoon, a Chinese state-aligned hacking group that gained infamy in 2024 for its hacks into telecom systems around the world, was responsible for the House breaches. Nextgov/FCW could not independently confirm whether Salt Typhoon carried out the intrusions. China manages a swath of state-backed hacking collectives that have sought to access U.S. government systems, as well as organizations that have knowledge of U.S. government and legal affairs."

"Congressional communications are a frequent target of foreign hackers because they can provide an unauthorized preview into legislative planning. Last year, the Congressional Budget Office, Capitol Hill's nonpartisan accounting service that delivers financial assessments for legislation, was accessed in an intrusion potentially tied to a foreign hacker group. In late 2024, a foreign adversary also accessed the contents of email communications between congressional legislative staffers and staff in the Library of Congress's Congressional Research Service."

Email inboxes of staff in multiple House of Representatives committees were targeted by Chinese hackers, and investigators describe the intrusions as early and ongoing. Some sources attribute the activity to Salt Typhoon, a Chinese state-aligned group known for 2024 telecom system hacks, though independent confirmation is lacking. It remains unclear which staff were targeted and whether email content was exfiltrated. Congressional communications are frequent targets because they can reveal legislative planning. Recent related breaches included access to the Congressional Budget Office and congressional staff communications with the Congressional Research Service. China denies involvement in U.S. cyber intrusions.

Read at Nextgov.com