The U.S. Treasury Department verified a cyber incident involving a Chinese state-backed group that infiltrated its workstations and unclassified materials via a compromised third-party cybersecurity vendor.

Threat actors entered Treasury Department systems through BeyondTrust. The breach may be related to the Salt Typhoon attacks.

The incident comes in the final days of the Biden presidency and as officials work to root out China-tied hackers from U.S. telecommunications systems.