\n<\/p>\n
The U.S. Congressional Budget Office has confirmed it was hacked.\u00a0<\/p>\n
Caitlin Emma, a spokesperson for CBO, told TechCrunch on Friday that the agency is investigating the breach and \u201chas identified the security incident, has taken immediate action to contain it, and has implemented additional monitoring and new security controls to further protect the agency\u2019s systems going forward.\u201d\u00a0<\/p>\n
CBO is a nonpartisan agency that provides economic analysis and cost estimates to lawmakers during the federal budget process, including after legislative bills get approved at the committee level in the House and Senate.\u00a0<\/p>\n
On Thursday, The Washington Post, which first revealed<\/a> the breach, reported that unspecified foreign hackers were behind the intrusion. According to the Post, CBO officials are worried that the hackers accessed internal emails and chat logs, as well as communications between lawmakers\u2019 offices and CBO researchers.\u00a0<\/p>\n Reuters reported<\/a> that the Senate Sergeant at Arms office, the Senate\u2019s law enforcement agency, notified congressional offices of a breach, warning them that emails between CBO and the offices could have been compromised and used to craft and send phishing attacks.\u00a0<\/p>\n It\u2019s unclear how the hackers gained access to the CBO\u2019s network. But soon after news of the breach became public, security researcher Kevin Beaumont wrote<\/a> on Bluesky that he suspected hackers may have exploited the CBO\u201ds outdated Cisco firewall to break into the agency\u2019s network.\u00a0\u00a0<\/p>\n Last month, Beaumont noted that CBO had a Cisco ASA firewall on its network that was last patched in 2024. At the time of his posting, the CBO\u2019s firewall was allegedly vulnerable to a series of newly discovered security bugs,<\/a> which were being exploited by suspected Chinese government-backed hackers.\u00a0\u00a0<\/p>\n Techcrunch event<\/p>\n \n\t\t\t\t\t\t\t\t\tSan Francisco<\/span> Beaumont said the CBO\u2019s firewall had not been patched by the time that the federal government shutdown took effect on October 1.\u00a0<\/p>\n
\n\t\t\t\t\t\t\t\t\t\t\t\t\t|<\/span>
\n\t\t\t\t\t\t\t\t\t\t\t\t\tOctober 13-15, 2026<\/span>\n\t\t\t\t\t\t\t<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/div>\n