Gov’t suspected of hacking into FDIC computers

The Chinese government is believed to have hacked into computers at the Federal Deposit Insurance Corp. in 2010, 2011 and 2013, including the workstation of then-FDIC Chair Sheila Bair, a congressional report says.
The report issued Wednesday by the Republican majority staff of the House Science, Space and Technology Committee cites a May 2013 memo from the FDIC inspector general to agency Chairman Martin Gruenberg. The memo described an “advanced persistent threat,” said to have come from the Chinese government, which compromised 12 computer workstations and 10 servers at the FDIC.
In addition to those incidents, the committee staff has been investigating the FDIC’s response to a number of what it calls major data breaches at the agency and whether it is properly safeguarding consumers’ banking information.
Zhu Haiquan, the spokesman at the Chinese Embassy in Washington, said he didn’t have detailed information on the report’s findings. “China firmly opposes and is committed to combatting all forms of cybercrimes,” Haiquan said in a statement. “China and the United States have already established a high-level joint dialogue mechanism on fighting cybercrime and related issues. This is the best channel for both sides to address this challenge. Making unfounded accusations is counterproductive.”
The issue of suspected Chinese government hacking has been sensitive since the disclosure last year of a massive breach of the U.S. Office of Personnel Management’s databases, which the U.S. believed was carried out by Chinese cyber spies. In one of the worst data breaches in U.S. history, the personal files of 21 million Americans were stolen, and the federal personnel agency came under fire for neglecting to put in basic cybersecurity protections to prevent the plunder.
The OPM breach dealt the U.S. a major national security blow, experts say, by exposing the personal information and foreign contacts of millions of people with security clearances.
Chinese and U.S. officials held talks last month in Beijing to bridge differences on cybersecurity amid complaints over China-based hacking operations that the U.S. says may already have cost U.S. companies tens of billions of dollars. U.S. officials have been especially eager to build on an agreement forged during Chinese President Xi Jinping’s visit to Washington last September under which neither government will support commercial cyber-theft.
Created during the Great Depression to insure bank deposits, the FDIC maintains a multibillion-dollar insurance fund. It monitors and examines the financial condition of U.S. banks, keeping confidential information on about 9,000 banks and savings and loans.
The House committee’s chairman, Republican Lamar Smith of Texas, said the staff report shows the FDIC’s “lax cybersecurity effort.” He accused the agency of trying to stonewall the committee in its investigation.
On the suspected Chinese hacking, the report says the “advanced persistent threat” compromised FDIC computers in 2010, 2011 and April 2013. “In essence, a foreign government penetrated FDIC’s computers and the workstations of high-level agency officials,” including Bair, the then-chief of staff and the then-general counsel, it says.
The agency watchdog inspector general criticized the FDIC in the 2013 memo for violating its own policies, according to the report. Marcy Gordon, Washington , AP

businessman gets nearly 4 years in us hacking case

A Chinese businessman was sentenced to nearly four years in prison this week for conspiring to export sensitive military information to China after accessing the computer systems of U.S. defense contractors, including Boeing. Su Bin was sentenced to 46 months in prison in federal court in Los Angeles. He had faced 30 years in prison before reaching a plea agreement with prosecutors in March. His attorneys were requesting two and a half years. The 51-year-old Bin admitted to conspiring with two unnamed hackers in China to export U.S. military information to the communist nation between 2008 and 2014, according to Bin’s plea agreement.