Foreign Threat Actor Hacks U.S. Congressional Budget Office, Exposes Confidential Data

The Congressional Budget Office, which serves as Congress’s independent financial analyst and bookkeeper, has been compromised by a suspected foreign threat actor in what could represent one of the most significant cybersecurity breaches targeting American legislative infrastructure.

The incident, discovered in recent days, potentially exposed sensitive communications between lawmakers’ offices and the nonpartisan research organization, raising concerns about the integrity of critical budget analysis that shapes U.S. federal legislation.

The CBO functions as Congress’s counterbalance to executive branch economic projections, providing independent analyses and “scores” on how proposed legislation would impact the national debt.

Every bill considered in either chamber receives a formal CBO assessment, making the organization’s research essential to the legislative process.

The breach represents a direct threat to this analytical independence and the data security of America’s legislative branch.

Early Detection and Immediate Response

CBO officials informed lawmakers that they believe the intrusion was detected early, potentially limiting the scope of exposed data.

According to individuals familiar with the incident, the organization has taken immediate containment measures and implemented additional security monitoring and controls.

However, officials express concern that communications, internal emails, and office chat logs between congressional staff and CBO researchers may have been accessed by the adversary or affiliated digital proxies before detection.

The breach has created immediate operational disruptions within the legislative process.

Several congressional offices have reportedly suspended email correspondence with the CBO due to cybersecurity risks, complicating the agency’s ability to support lawmakers with timely budget analysis and legislative scoring.

CBO spokeswoman Caitlin Emma confirmed the incident in a statement, emphasizing that “work for the Congress continues” despite the ongoing investigation and remediation efforts.

The timing of this breach carries significant implications, occurring amid heightened partisan tensions surrounding budget scoring.

Congressional Republicans criticized the CBO’s cost projections for President Trump’s One Big Beautiful Bill over the summer, particularly the office’s determination that the legislation would add trillions to the national debt.

This assessment prompted Senate Republicans to revise procedures governing how CBO scores influence legislative outcomes.

The CBO occasionally faces network threats like other government and private sector entities, but this intrusion represents a notably sophisticated attack targeting legislative institutions.

The involvement of a suspected foreign actor suggests potential state-sponsored interest in U.S. congressional operations and financial policy deliberations.

While the full scope of the breach remains under investigation, the incident underscores the growing cybersecurity vulnerabilities within federal legislative infrastructure and raises critical questions about protecting sensitive government networks from advanced persistent threats.

Cyber Awareness Month Offer: Upskill With 100+ Premium Cybersecurity Courses From EHA's Diamond Membership: Join Today