The Congressional Budget Office (CBO), a critical U.S. legislative agency responsible for independent financial analysis and budget scoring, suffered a sophisticated cyber breach by a suspected foreign threat actor. The intrusion compromised sensitive communications, including internal emails and chat logs between lawmakers’ offices and CBO researchers, risking exposure of confidential legislative deliberations and economic projections that shape federal policy. While detected early, the breach disrupted operations, prompting some congressional offices to halt email correspondence with the CBO, delaying budget analyses and legislative scoring.The attack threatens the integrity of U.S. legislative processes, particularly amid partisan disputes over debt projections. The suspected state-sponsored nature of the breach suggests a targeted effort to influence or surveil federal financial policymaking, with potential long-term implications for national security. Though containment measures were implemented, the incident highlights vulnerabilities in government cybersecurity defenses against advanced persistent threats (APTs), raising concerns about the protection of classified legislative data and the broader stability of U.S. institutional trust.

The Congressional Budget Office (CBO), a nonpartisan U.S. government agency responsible for critical financial analyses, suffered a sophisticated cyber breach by suspected foreign actors. The attack exposed sensitive financial research data, including budget projections, economic models, and legislative cost estimates—information vital for congressional decision-making affecting millions of Americans.The compromised data could provide foreign adversaries with insights into U.S. fiscal planning and legislative priorities, potentially influencing policy outcomes. While the exact scope of the breach remains undisclosed, the CBO confirmed unauthorized access to its systems, prompting an immediate federal investigation. The incident underscores persistent vulnerabilities in high-value government infrastructure, with state-sponsored hackers increasingly targeting agencies holding strategic intelligence.Authorities are assessing the full impact, but the breach aligns with a broader trend of cyberattacks on U.S. government entities, raising concerns over cybersecurity inadequacies in protecting national interests. The CBO is collaborating with federal cybersecurity officials to mitigate risks and prevent future intrusions, though no attacker details or methods have been publicly revealed. The breach may accelerate calls for enhanced security funding and stricter data-handling protocols across government agencies.

The U.S. Congressional Budget Office (CBO) suffered a cyber breach by a suspected foreign actor, potentially exposing internal communications, research, and email/chat logs used to guide federal legislation. The incident, discovered recently, is under federal investigation due to concerns over unauthorized access to sensitive interactions between lawmakers and CBO analysts. The CBO confirmed the breach and took immediate containment measures, though the extent of data compromise and the attacker’s identity remain undisclosed. Given the CBO’s role in shaping economic and budgetary policies, the breach poses risks of legislative manipulation or intelligence gathering by state-sponsored actors. The incident echoes a December 2024 attack on the U.S. Treasury via a third-party vendor, though no direct link has been established.

The U.S. Congressional Budget Office (CBO), a federal agency responsible for providing nonpartisan economic and budgetary analysis to Congress, suffered a suspected nation-state cyberattack. The breach, detected recently, prompted immediate containment measures, including enhanced monitoring and new security controls. While details remain undisclosed, the attack may have exploited a firewall vulnerability in an unpatched Cisco ASA device, rendering the network security system unreachable.The CBO handles highly sensitive fiscal data, including economic projections and legislative cost estimates, which could provide foreign adversaries with strategic insights into U.S. policy priorities. The incident follows a pattern of targeted attacks on congressional entities, such as the 2024 breach of the Library of Congress, where hackers accessed months of emails tied to draft legislation. The ongoing federal government shutdown has exacerbated vulnerabilities, delaying critical defensive actions like patching and threat intelligence sharing.The full scope of the intrusion—including whether congressional communications, internal analyses, or budget models were compromised—remains under investigation. The attack underscores escalating risks to government agencies from state-sponsored cyber operations, with potential long-term implications for national security and legislative integrity.

The U.S. Congressional Budget Office (CBO) suffered a cybersecurity breach by a suspected foreign hacker, potentially exposing sensitive internal communications and data. The intrusion, detected recently, raised concerns over the exposure of emails and exchanges between congressional offices and CBO analysts. While officials claim the breach was contained early, some congressional offices temporarily halted communications with the CBO due to security fears. The CBO, a nonpartisan agency providing economic analysis and legislative cost estimates, could have had draft reports, economic forecasts, and internal discussions compromised. The attack aligns with a broader trend of cyber incidents targeting U.S. government agencies, including prior breaches at the Treasury Department and the Committee on Foreign Investment in the United States (CFIUS), attributed to the Chinese state-sponsored APT group Silk Typhoon. This group previously exploited the ProxyLogon zero-day vulnerabilities in Microsoft Exchange Server in 2021, compromising tens of thousands of systems.