The National Treasury has confirmed it was impacted by a widespread cyber attack targeting Microsoft systems, joining hundreds of organizations across the U.S., Europe, and Asia in falling victim to the breach.
Malware was detected on the Treasury’s Infrastructure Reporting Model (IRM) website, a critical platform for infrastructure monitoring and reporting. The attack exploited vulnerabilities in Microsoft’s SharePoint software, a collaboration tool used by governments and corporations worldwide.
Global Scale of the Attack
Microsoft has attributed the breach to Chinese state-sponsored hackers, though Beijing has denied involvement. Over 400 companies globally have reportedly been affected, with fears that prolonged exposure could severely impact economies.
Tech expert Toby Shepek explained that the attack highlights the inherent risks in digital systems. “Microsoft, as the world’s largest software manufacturer, is a prime target. SharePoint is widely used for data sharing, making it an attractive entry point for hackers,” he said.
Efforts to Mitigate the Threat
Microsoft is working urgently to release security patches and has collaborated with the U.S. Cyber Defense Agency to contain the breach. IT correspondent Nicola Merson warned that time is critical. “If this drags on, the financial and operational fallout could be dire,” she said.
Despite the breach, the National Treasury assured the public that all systems remain fully operational, with no disruptions to services.
Calls for Stronger Cyber Defenses
Authorities have urged governments and businesses to bolster their cybersecurity measures, including:
-
Regular system updates and patches
-
Penetration testing to identify vulnerabilities
-
Cyber insurance to mitigate financial risks
Experts also cautioned the public to remain vigilant online, noting that hackers are exploiting weaknesses to steal intellectual property, encryption keys, and sensitive data from sectors like defense, finance, and healthcare.
Ongoing Concerns
The attack has been classified as a “high-urgency threat” due to SharePoint’s deep integration with Microsoft services like Office, Teams, OneDrive, and Outlook, which store vast amounts of sensitive information.
As investigations continue, the focus remains on containing the breach and preventing further damage. For now, businesses and governments are advised to prioritize cybersecurity to avoid becoming the next victim.