[News](/news) U.S Treasury emails breached [Blog](/blog)[Breaches](/breaches)[Resources](/resources)[News](/news) # U.S Treasury emails breached ##### [Edward Kost](/team/edward-kost) December 13, 2020 Foreign cyber criminals breached several U.S. federal agencies, including the U.S Treasury. The criminal gang, suspected to be working for Russia, penetrated and monitored internal email communications flowing from the U.S Treasury and Commerce departments. It is speculated that the cybercriminals are linked to the Russian hackers that [recently penetrated cybersecurity giant FireEye](https://www.upguard.com/news/fireeye-cyberattack). Given FireEye’s prestigious portfolio of government clients, such a connection could be evidence of a mounting attack against the Western world. The incident led to a National Security Council meeting at the White House. An immediate remediation effort is underway. NSC spokesperson John Ullyot said they “are taking all necessary steps to identify and remedy any possible issues related to this situation.”**‍** #### **How did the cyber attack happen?**‍ It is suspected that the cyber attackers compromised an IT update by SolarWinds, and used this as an attack vector to penetrate U.S federal communication systems.  SolarWinds services a wide range of executive government clients including the National Security Agency and US military. This strategy of burying malicious code within innocuous software (known as a [supply chain attack](https://www.upguard.com/blog/supply-chain-attack))  is a common tactic used by hackers to [breach victims through their third-party network](https://www.upguard.com/product/vendorrisk). The attack, first reported by Reuters, penetrated the Microsoft Office 365 account of the National Telecommunications and Information Administration (NTIA). It’s unclear, at this point, how long the criminals were monitoring internal emails, but it’s speculated this lasted for several months.  The larger the cyberattack operation, the longer it will take to investigate. Given that the target was the United States Government, investigations may take months, or even years, to complete. ## How secure is SolarWinds? SolarWinds provides IT management and observability software for monitoring networks, applications, databases, and infrastructure across on-premises, cloud, and hybrid environments. The company offers solutions for incident response, IT service management, and database optimization. * View our free preliminary report on SolarWinds’s security posture * 13 risk factors, including email security, SSL, DNS health, open ports and common vulnerabilities [View SolarWinds's score](/security-report/solarwinds) [View score](/security-report/solarwinds) [https://www.solarwinds.com](/security-report/solarwinds) ### Sign up for our newsletter UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights. ## Latest news Stay up-to-date with the latest news in cybersecurity. [](/news/hugging-face-data-breach-2026-07-20) #### [Hugging Face data breach: key facts and what we know so far](/news/hugging-face-data-breach-2026-07-20) A data breach involving Hugging Face was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 20, 2026 [](/news/ey-data-breach-2026-07-19) #### [EY data breach: what happened and what's at risk](/news/ey-data-breach-2026-07-19) A data breach involving EY was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) #### [South Florida Injury & Convenient Care data breach exposes names and Social Security numbers](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) A data breach involving South Florida Injury & Convenient Care was reported in July 2026. See incident details, impact on customers, and security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/park-west-psychology-data-breach-2026-07-16) #### [Park West Psychology data breach: what happened and what's at risk](/news/park-west-psychology-data-breach-2026-07-16) A data breach involving Park West Psychology was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) #### [Fall River Municipal Credit Union data breach: what happened and what's at risk](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) A data breach involving Fall River Municipal Credit Union was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [](#) July 14, 2026 [](/news/npcil-data-breach-2026-07-16) #### [NPCIL data breach: World Leaks claims exposure of Kudankulam Nuclear Power Plant files](/news/npcil-data-breach-2026-07-16) A data breach involving NPCIL was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 14, 2026 [View all news](/news) ## Protect your organization Get in touch or book a free demo. [Contact sales](/demo) [Free demo](/demo) ##### Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](/instant-security-score)