The U.S. Congressional Budget Office Confirms Security Breach
The U.S. Congressional Budget Office (CBO) has been the target of a recent hacking incident, as confirmed by agency spokesperson Caitlin Emma. In response to the breach, the CBO is conducting an investigation and has taken immediate steps to contain the security incident. Additional monitoring and enhanced security measures have been implemented to safeguard the agency’s systems moving forward.
As a nonpartisan agency, the CBO plays a crucial role in providing economic analysis and cost estimates to lawmakers during the federal budget process. This includes offering insights after legislative bills have been approved at the committee level in both the House and Senate.
Reports from The Washington Post indicate that foreign hackers are believed to be behind the intrusion into the CBO’s systems. Concerns have been raised about potential access to internal emails, chat logs, and communications between lawmakers’ offices and CBO researchers.
The Senate Sergeant at Arms office, responsible for law enforcement in the Senate, has alerted congressional offices about the breach. There are fears that compromised emails between the CBO and these offices could be used for phishing attacks.
While the exact method of the hack remains unclear, security researcher Kevin Beaumont has suggested that outdated Cisco firewall software may have been exploited by the hackers to gain access to the CBO’s network. In a previous observation, Beaumont highlighted vulnerabilities in the CBO’s Cisco ASA firewall, which had not been patched since 2024.
Recent security bugs discovered in the Cisco firewall were reportedly being exploited by suspected Chinese government-backed hackers. Despite warnings, the CBO’s firewall had not been updated before the federal government shutdown on October 1. Beaumont later confirmed that the firewall is now offline.
When approached for comments on Beaumont’s findings, the CBO’s spokesperson declined to respond. Similarly, representatives from Cisco have not provided any immediate feedback on the matter.
