At this time, there is no indication that any other federal agencies have been impacted by this incident.
The cybercriminals had compromised BeyondTrust, a third-party vendor that provides identity and remote support for Treasury workstations.
However, it is unclear how the BeyondTrust key was stolen.
We are working aggressively to safeguard against any further impacts and will provide updates, as appropriate.
source: www.techworm.net