Another cyberattack has shaken Washington. The Congressional Budget Office (CBO) has confirmed that its network has been breached, with suspicions that a state-sponsored hacker. The case, which once again highlights the importance of cybersecurity in the United States, is already being investigated in depth by the relevant authorities.
Confirmation of the incident and first measures
The agency's spokesperson, Caitlin Emma, confirmed in a statement to BleepingComputer that the CBO detected the security incident and reacted immediately to limit the damage.
"The Congressional Budget Office took rapid containment measures and has already implemented additional monitoring mechanisms and new security controls to protect its systems," he said.
See also: Sandworm targets Ukraine with data wiper malware
According to Emma, the investigation is ongoing and the organization's work with Congress continues as normal, without significant delays. At the same time, she emphasized that the CBO, like many other government agencies, is constantly faced with cyber threats, which requires constant vigilance and investment in defense mechanisms.
Concern about leakage of sensitive data
The Washington Post was the first to report the breach, noting that the attack was discovered in recent days. Sources familiar with the investigation expressed concerns that sensitive data, such as emails between CBO analysts and congressional offices, may have been exposed.
Although officials believe the breach was detected relatively early, some congressional offices reportedly temporarily suspended email exchanges with the CBOas a precaution until the integrity of the network could be fully ensured.
This attack is another reminder of how vulnerable even the most protected government networks can be, especially when they use shared communication platforms or third-party infrastructure.
A chain of attacks with a state-sponsored footprint
The incident at the Congressional Budget Office is not an isolated one. In recent months, several US government agencies have come under targeted attacks by organized cyberespionage groups.
See also: DeFi protocol Balancer begins recovering stolen funds
In December 2024, the US Treasury Department announced that it had been hacked through its remote support platform, BeyondTrust. Shortly after, it was revealed that the Committee on Foreign Investment in the United States (CFIUS) had also been hit by the same attackers.
The attacks were attributed to the Silk Typhoon, a state-backed group that has been active since at least 2021. The group became known for exploiting vulnerabilities ProxyLogon , which resulted in the compromise of approximately 68,500 servers worldwide before security patches were issued.
The growing wave of cyberattacks against institutions
The CBO case adds to a troubling pattern of cyberattacks targeting U.S. government institutions and critical infrastructure . These attacks, often attributed to state-sponsored actors, are intended not only to steal data but also to create political pressure or instability
See also: Dismantling a major credit card fraud operation
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
The continued reliance of government agencies on interconnected digital systems makes data an extremely attractive target. At the same time, the lack of specialized personnel cybersecurity in many organizations remains a critical problem, increasing exposure to attacks.
Towards a new cyber defense strategy
Analysts believe that the incident at CBO will serve as another "bell bell" for the modernization of federal security policy. Authorities are called on to review not only technical protection measures, but also communication protocols between agencies, which are often the weakest point.
Washington is already reportedly moving towards stricter security standards, with investments in artificial intelligence for anomaly detection, staff training and strengthening partnerships with private cybersecurity providers.
As threats grow and become increasingly sophisticated, the CBO appears to be just the latest—but not the last—victim in an ongoing “digital war” waged quietly in the background of the global political scene.
Source: www.bleepingcomputer.com
