WASHINGTON – The Justice Department announced charges Wednesday against 12 Chinese citizens who are accused of cyber-hacking to steal data from the Treasury Department and other organizations worldwide.
The State Department is offering a $10 million reward for information about the hackers, who remain at large.
Ten suspects in a New York case include two officers of China’s Ministry of Public Security; employees of Anxun Information Technology, which is known as i-Soon, according to court records.
“For years, these 10 defendants – two of whom we allege are PRC officials – used sophisticated hacking techniques to target religious organizations, journalists, and government agencies, all to gather sensitive information for the use of the” Chinese government, Matthew Podolsky, the acting U.S. attorney for the Southern District of New York, said in a statement.
Two suspects in a Washington, D.C., case were charged as members of Advanced Persistent Threat 27 with participating in sophisticated computer hacking against companies and since 2011 that caused millions of dollars in damage, according to court records.
The defendants in these cases have been hacking for the Chinese government for years, and these indictments lay out the strong evidence showing their criminal wrongdoing,” Edward Martin, the U.S. attorney in Washington, said in a statement. “We, again, demand that the Chinese government put a stop to these brazen cyber criminals who are targeting victims across the globe and then monetizing the data they have stolen by selling it across China.”
The i-Soon staffers allegedly gained access to federal and state agencies including Treasury in late 2024, multiple foreign ministries in Asia and a large U.S. religious organization, according to court records.
Officials said targets of the hacking included the Defense Intelligence Agency; the Commerce Department; the foreign ministries of Taiwan, South Korea, India and Indonesia; news organizations critical of China; and the New York state Assembly.
The i-Soon staffers allegedly conducted computer intrusions on its own initiative and then sold, or attempted to sell, the stolen data to at least 43 government bureaus in the Chinese Ministry of Public Security, officials said. The company charged the government between about $10,000 and $75,000 for each email inbox it successfully exploited, officials said.
Sue Bai, head of the Justice Department’s National Security Division, said the charges exposed Chinese government agents “directing and fostering indiscriminate and reckless attacks against computers and networks worldwide.”
“We will continue to fight to dismantle this ecosystem of cyber mercenaries and protect our national security,” Bai said in a statement.
The Chinese Ministries of Public Security and State Security paid private hackers to target specific victims in a way that obscured the government’s involvement, according to court records. A network of private companies and contractors in China identified vulnerable computers, exploited them and then identified information that could be sold directly or indirectly to the Chinese government, according to court records.(USA Today)