Congressional Budget Office confirms it was hacked | TechCrunch

"Caitlin Emma, a spokesperson for CBO, told TechCrunch on Friday that the agency is investigating the breach and "has identified the security incident, has taken immediate action to contain it, and has implemented additional monitoring and new security controls to further protect the agency's systems going forward." CBO is a nonpartisan agency that provides economic analysis and cost estimates to lawmakers during the federal budget process, including after legislative bills get approved at the committee level in the House and Senate."

"According to the Post, CBO officials are worried that the hackers accessed internal emails and chat logs, as well as communications between lawmakers' offices and CBO researchers. Reuters reported that the Senate Sergeant at Arms office, the Senate's law enforcement agency, notified congressional offices of a breach, warning them that emails between CBO and the offices could have been compromised and used to craft and send phishing attacks."

The Congressional Budget Office detected and confirmed a security breach that allowed unauthorized access to its systems. Agency officials identified the incident, contained it, and implemented additional monitoring and security controls while investigating the intrusion. Unspecified foreign hackers are suspected to have accessed internal emails, chat logs, and communications between lawmakers' offices and CBO researchers, creating potential material for phishing attacks. The Senate Sergeant at Arms warned congressional offices about possible compromises of emails between CBO and offices. Security researchers flagged an outdated Cisco ASA firewall with unpatched 2024 vulnerabilities as a likely attack vector; that firewall was later taken offline.

Read at TechCrunch