November 10, 2025


Ongoing Cybersecurity Breach at Congressional Budget Office Disrupts Communication

A cybersecurity breach at the Congressional Budget Office (CBO), discovered last week, is now an active threat, continuing to disrupt both incoming and outgoing communications within the pivotal legislative agency. The CBO, known for its nonpartisan analysis and costing of proposed legislation, remains in a precarious position as it grapples with the breach's implications.

Employees at the Library of Congress have been issued stern warnings to heighten their cybersecurity measures in response. A detailed email, which POLITICO obtained on Monday, advises Library staff to exercise extreme caution. Specifically, the communication stresses the importance of not clicking on any links in emails from the CBO and refraining from sharing sensitive information via email, Microsoft Teams, or Zoom.

The email emphatically instructs staff to, "Maintain a high level of vigilance and verify the legitimacy of CBO communications by confirming with the sender via telephone that they sent the message.” This directive underscores the gravity of the breach and the potential risks of misinformation or unauthorized communications.

The ongoing cybersecurity issue comes at a time when the CBO's input is crucial. Congressional staff frequently liaise with the CBO for essential economic and budgetary evaluations which directly influence legislative decisions in both the House of Representatives and the Senate. The disruption could significantly impede the legislative process, affecting everything from budget reviews to the scoring of significant bills.

As of Monday, there was scant information on the broader consequences of this breach on the legislative branch’s operations. However, a CBO spokesperson had previously assured that immediate actions were taken to contain the breach. As investigations continue, the office has not provided further updates, instead referring back to their initial response last week.

This cybersecurity incident not only highlights the vulnerabilities that exist within important government bodies but also puts a spotlight on the need for more robust security measures to safeguard sensitive information that could impact national governance.