Suspected Chinese Hack on US Government Worse Than Previously Thought: Cyber Researchers

Suspected Chinese Hack on US Government Worse Than Previously Thought: Cyber Researchers
The Microsoft logo during the World Economic Forum (WEF) annual meeting in Davos, Switzerland, on May 23, 2022. Fabrice Coffrini/AFP via Getty Images
Ryan Morgan
Updated:

A recent cybersecurity breach of U.S. government emails may have reached further than initially thought, according to a new report by the cybersecurity firm Wiz.inc.

Earlier this month, Microsoft and U.S. government cybersecurity experts identified a breach of email systems tied to 25 organizations, including several U.S. government agencies. Microsoft attributed the security breach, which likely occurred in May, to a Chinese government-linked hacking group called Storm-0558. According to Microsoft, Storm-0558 obtained a private encryption key, known as an MSA key, and used it to forge access tokens for the Outlook Web Access (OWA) and Outlook.com services.