Photo: Witthaya Prasongsin / Moment / Getty Images
The Congressional Budget Office (CBO) has fallen victim to a cyberattack, potentially exposing sensitive communications with lawmakers. The breach was revealed in an email sent to congressional staff this week, which was obtained by CNN. Although the email from the Senate sergeant at arms did not specify a perpetrator, a U.S. official briefed on the incident told CNN that Chinese state-backed hackers are suspected of being behind the attack. The email warned that the hacking incident is "ongoing" and advised staff to avoid clicking on links from CBO accounts, as they may still be compromised.
The CBO plays a critical role in providing lawmakers with cost estimates and analyses of legislation, as well as long-term projections for the U.S. budget. This type of information could be of significant interest to foreign intelligence services, especially amid ongoing U.S.-China trade tensions. The breach is part of a series of recent cyberattacks linked to China, targeting non-public information about U.S. policies. In July, suspected Chinese hackers breached Wiley Rein, a law firm involved in U.S.-China trade negotiations.
CBO spokesperson Caitlin Emma stated that the office has identified the security incident, taken immediate steps to contain it, and implemented additional monitoring and security controls. The incident is under investigation, and work for Congress continues.
The federal government is currently experiencing a record 37-day shutdown, which has stretched resources for cyber defense thin. The Cybersecurity and Infrastructure Security Agency (CISA) planned to furlough about two-thirds of its workforce at the start of the shutdown. Despite these challenges, the threat from state-backed and criminal hackers remains persistent. In September, CISA issued an emergency order requiring federal agencies to secure networks against a hacking campaign affecting at least one agency.
The Chinese Embassy in Washington, D.C., has denied involvement, stating that China "consistently opposes and strictly combats all forms of cyberattacks." The ongoing investigation highlights the importance of strengthening cybersecurity measures within government agencies to protect against state-sponsored hacking schemes.