Nextgov

Congressional Budget Office Hacked by Suspected Foreign Actor

First seen 2 Dec 2025, 18:33 UTC • •10.9

Article Content

1 / 21

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

The Congressional Budget Office (CBO) confirmed on November 6, 2025, that it was hacked, potentially exposing sensitive government data. The breach is believed to be linked to a foreign actor, and the CBO has taken immediate action to contain the incident and enhance security measures.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 218d ago How this analysis works

More articles in this cluster (20)

Threat Graph

9 entities, 8 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (4)

Data Breach
Malware
Phishing
T1566 - Phishing

Organization (4)

Congressional Budget Office
Congressional Budget Office (CBO)
The Congressional Budget Office
U.S. Congressional Budget Office

Affected Platform (1)

Cisco ASA firewall

Relationships

Data Breach targets Cisco ASA firewall
Malware targets Cisco ASA firewall
Phishing targets Cisco ASA firewall
T1566 - Phishing targets Cisco ASA firewall
Data Breach related to Congressional Budget Office
Data Breach related to Congressional Budget Office (CBO)
Data Breach related to The Congressional Budget Office
Data Breach related to U.S. Congressional Budget Office

Following this threat?

Track Congressional Budget Office in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…

Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…