Washington, D.C.: The U.S. Justice Department (DOJ) has charged 12 Chinese nationals for their alleged involvement in a state-sponsored hacking operation that targeted American dissidents and government agencies, including the Treasury Department. According to the DOJ, the hackers also penetrated an American religious organisation and a Hong Kong-based newspaper.
Federal prosecutors allege that the hackers worked under the direction of Chinese ministries while also operating independently for profit. The indictment claims that the individuals—some linked to China’s Ministry of Public Security—instructed cyber intrusions on behalf of Chinese agencies, charging between $10,000 and $75,000 per exploited email inbox.
Sue J Bai, head of the DOJ’s National Security Division stated that, “Today, we are exposing the Chinese government agents directing and fostering indiscriminate and reckless attacks against computers and networks worldwide. We will continue to fight to dismantle this ecosystem of cyber mercenaries and protect our national security.”
The DOJ has not revealed specific details about the U.S.-based dissidents affected. However, the religious organisation targeted had sent missionaries to China and was openly critical of the Chinese government. The Hong Kong newspaper, though unnamed, was portrayed as being opposed to Beijing.
Justice Department Charges 12 Chinese Contract Hackers and Law Enforcement Officers in Global Computer Intrusion Campaigns
🔗: https://t.co/xfhxOq8AID pic.twitter.com/rr1K2bPMuf
— National Security Division, U.S. Dept of Justice (@DOJNatSec) March 5, 2025
Beyond the United States, the alleged hacking operation targeted foreign ministries in Taiwan, India, South Korea, and Indonesia. The charge follows previous allegations of Chinese-linked cyber intrusions, including a December breach of the U.S. Treasury Department, which China denied as “baseless.”
China has yet to react to the latest allegations but has consistently denied previous accusations of state-sponsored hacking. In October, the FBI and the Cybersecurity and Infrastructure Security Agency (CISA) linked cyberattacks on two U.S. presidential campaigns to China-affiliated actors. Similar operations have been reported in the UK and New Zealand, including an attack on the UK’s Electoral Commission.
The charges were unsealed in a Manhattan federal court, marking the latest development in an ongoing cybersecurity battle between the U.S. and China.