Nextgov

Congressional Budget Office Hacked, Suspected Foreign Involvement

First seen 7 Nov 2025, 12:54 UTC • Nextgov

+3 •44.1

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

The Congressional Budget Office (CBO) confirmed it was hacked, potentially exposing sensitive government data. The agency has implemented new security measures and is investigating the incident, which may involve foreign actors, possibly from China. CBO spokesperson Caitlin Emma stated that immediate actions were taken to contain the breach and enhance security protocols.

How this analysis works

Attack Flow

16 entities, 16 inferred relationships (STIX 2.1).

Threat Actor (1)

Silk Typhoon

Technique (1)

Data Breach

Organization (10)

Committee on Foreign Investment in the United States (CFIUS)
Congressional Budget Office
Congressional Budget Office (CBO)
Library of Congress
Library of Congress’s Congressional Research Service
U.S. Congressional Budget Office
U.S. Treasury Department
Wiley Rein
Cisco
F5

Affected Platform (2)

Microsoft Exchange Server
Microsoft SharePoint

Tool (1)

BeyondTrust

Vulnerability (1)

ProxyLogon

Relationships

Silk Typhoon uses BeyondTrust
Silk Typhoon uses Data Breach
Silk Typhoon exploits ProxyLogon
BeyondTrust exploits ProxyLogon
ProxyLogon targets Microsoft Exchange Server
ProxyLogon targets Microsoft SharePoint
Silk Typhoon targets Committee on Foreign Investment in the United States (CFIUS)
Silk Typhoon targets Congressional Budget Office
Silk Typhoon targets Congressional Budget Office (CBO)
Silk Typhoon targets Library of Congress
Silk Typhoon related to Library of Congress’s Congressional Research Service
Silk Typhoon related to U.S. Congressional Budget Office
Silk Typhoon related to U.S. Treasury Department
Silk Typhoon related to Wiley Rein
Silk Typhoon related to Cisco
Silk Typhoon related to F5

Continue Reading

Italy Extradites Chinese Hacker Xu Zewei to the U.S. for COVID-19 Research Theft Evolution of Chinese-Nexus Cyber Operations: Strategic Long-Term Threats Chinese Hackers Exploit Dell Zero-Day Flaw CVE-2026-22769 Since Mid-2024 Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching Chinese Hackers Target US Communications Networks: Salt Typhoon Operation Congressional Budget Office Hacked by Suspected Foreign Actor

Congressional Budget Office Hacked, Suspected Foreign Involvement

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading