FBI Declares Major Cyber Incident Following Chinese Hack of Surveillance Systems

Severity: High (Score: 74.0)

Sources: Politico, Breitbart, Bloomberg, Foxnews, Nbcnews

Summary

The FBI has classified a suspected Chinese cyber intrusion into its surveillance systems as a 'major incident,' indicating significant risks to U.S. national security. The breach reportedly compromised sensitive data, including personally identifiable information and surveillance metadata. The attack exploited vulnerabilities in a commercial Internet Service Provider's infrastructure, showcasing the sophistication of the hackers. This incident follows the notorious Salt Typhoon hacking campaign, which previously targeted U.S. telecommunications. The FBI notified Congress about the breach, which was detected in early March 2026, and emphasized the urgency of the situation. Lawmakers were informed that the hackers accessed a system containing law enforcement sensitive information, including data related to ongoing investigations. The breach is seen as a major counterintelligence success for China, raising concerns about ongoing vulnerabilities in U.S. cybersecurity. The FBI has not disclosed specific details about the attack vector or the extent of the data compromised. Key Points: • FBI classified a Chinese cyber intrusion as a 'major incident' affecting national security. • The breach compromised sensitive law enforcement data, including personally identifiable information. • Attackers exploited vulnerabilities in a commercial ISP's infrastructure to gain access.

Key Entities

• Salt Typhoon (apt_group)
• Data Breach (attack_type)
• Stryker (company)
• FBI (company)
• Federal Bureau Of Investigation (company)
• China (country)
• United States (country)
• Government (industry)
• Telecommunications (industry)
• T1041 - Exfiltration Over C2 Channel (mitre_attack)
• T1195 - Supply Chain Compromise (mitre_attack)