US Charges Chinese Hackers for Targeting Dissidents

March 06, 2025 09:46 AM
Chinese hacker

U.S. prosecutors have charged 12 Chinese nationals in an alleged state-sponsored hacking scheme that sold data on U.S.-based dissidents to the Chinese government. According to the Justice Department (DOJ), the hackers also targeted government agencies, including the Treasury.

 The operation allegedly extended to an American religious group and a Hong Kong newspaper. While China has not responded to these specific claims, it has previously denied similar accusations.

In December, the Treasury Department reported a "major" breach by Chinese state-sponsored hackers, who gained access to employee workstations and some unclassified documents. 

China denied any involvement, calling the claims "baseless" and stating that it opposes all forms of hacking. The timing of the latest DOJ charges remains unclear, but they were unsealed in a Manhattan federal court on Wednesday.

Who is being charged?

Among those charged were two officers from China’s Ministry of Public Security. According to the DOJ, hackers posing as employees of the private company i-Soon charged Chinese agencies between $10,000 and $75,000 per compromised email inbox. They allegedly carried out cyber intrusions both under the direction of Chinese ministries and independently, profiting significantly from the stolen data.

"Today, we are exposing Chinese government agents responsible for reckless cyberattacks on global networks," said Sue J Bai, head of the DOJ's National Security Division. She added that efforts will continue to dismantle this network of cyber mercenaries and safeguard national security.

Who was targeted?

No specific details were provided regarding the US-based dissidents who were targeted.

The hacked religious organization was described as one that had previously sent missionaries to China and had been openly critical of the Chinese government.

A Hong Kong newspaper was also among the targets, though it was not named. The statement only mentioned that it was "viewed as being opposed to the PRC government" (People’s Republic of China).

In addition to US agencies, cyberattacks were reported against the foreign ministries of Taiwan, India, South Korea, and Indonesia.

In October, the FBI and the Cybersecurity and Infrastructure Security Agency revealed that hackers linked to the Chinese government had targeted two major US presidential campaigns.

Earlier in the year, seven Chinese nationals were charged with orchestrating a hacking operation that spanned at least 14 years, targeting foreign critics of China.

Western governments have also attributed cyberattacks to China, including breaches of the UK’s Electoral Commission and the parliaments of the UK and New Zealand.

As part of its long-standing rewards program, the US State Department announced a reward of up to $10 million for information on i-Soon, its employees, and Chinese officials involved in the cyber activities outlined in the Department of Justice’s indictments.