Nextgov

Congressional Budget Office Hacked by Suspected Foreign Actor

First seen 2 Dec 2025, 18:33 UTC • Washingtonpost

+15 •10.9

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

The Congressional Budget Office (CBO) confirmed on November 6, 2025, that it was hacked, potentially exposing sensitive government data. The breach is believed to be linked to a foreign actor, and the CBO has taken immediate action to contain the incident and enhance security measures.

How this analysis works

Attack Flow

23 entities, 27 inferred relationships (STIX 2.1).

Threat Actor (1)

Silk Typhoon

Technique (5)

Data Breach
Malware
Phishing
Zero-day Exploit
T1566 - Phishing

Organization (11)

Cisco
Committee on Foreign Investment in the United States (CFIUS)
Congressional Budget Office
Congressional Budget Office (CBO)
Library of Congress
Library of Congress’s Congressional Research Service
The Congressional Budget Office
U.S. Congressional Budget Office
U.S. Treasury Department
Wiley Rein
F5

Malware (1)

ClickFix

Affected Platform (3)

Cisco ASA firewall
Microsoft Exchange Server
Microsoft SharePoint

Tool (1)

BeyondTrust

Vulnerability (1)

ProxyLogon

Relationships

Silk Typhoon uses ClickFix
Silk Typhoon uses BeyondTrust
Silk Typhoon uses Data Breach
Silk Typhoon uses Malware
Silk Typhoon uses Phishing
Silk Typhoon uses Zero-day Exploit
Silk Typhoon uses T1566 - Phishing
ClickFix exploits ProxyLogon
BeyondTrust exploits ProxyLogon
ProxyLogon targets Cisco ASA firewall
ProxyLogon targets Microsoft Exchange Server
ProxyLogon targets Microsoft SharePoint
Silk Typhoon targets Cisco
Silk Typhoon targets Committee on Foreign Investment in the United States (CFIUS)
Silk Typhoon targets Congressional Budget Office
Silk Typhoon targets Congressional Budget Office (CBO)
ClickFix targets Cisco
ClickFix targets Committee on Foreign Investment in the United States (CFIUS)
ClickFix targets Congressional Budget Office
ClickFix targets Congressional Budget Office (CBO)
Silk Typhoon related to Library of Congress
Silk Typhoon related to Library of Congress’s Congressional Research Service
Silk Typhoon related to The Congressional Budget Office
Silk Typhoon related to U.S. Congressional Budget Office
Silk Typhoon related to U.S. Treasury Department
Silk Typhoon related to Wiley Rein
Silk Typhoon related to F5

Continue Reading

Italy Extradites Chinese Hacker Xu Zewei to the U.S. for COVID-19 Research Theft Evolution of Chinese-Nexus Cyber Operations: Strategic Long-Term Threats Chinese Hackers Exploit Dell Zero-Day Flaw CVE-2026-22769 Since Mid-2024 Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching Chinese Hackers Target US Communications Networks: Salt Typhoon Operation Congressional Budget Office Hacked, Suspected Foreign Involvement

Congressional Budget Office Hacked by Suspected Foreign Actor

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading