The US Department of Justice has clarified that several federal agencies were targeted but not necessarily breached by Chinese hackers, refining earlier reports on the scope of cyber-espionage.
The United States Department of Justice recently issued a formal correction regarding its previous characterization of high-profile cyberattacks targeting federal agencies. Officials acknowledged that earlier statements implying a wide range of government bodies had been successfully breached on clarifies that while these entities were the focus of systematic targeting, they were not all necessarily compromised
This correction, released on a Friday, serves to distinguish between the act of targeting and the actual success of a digital intrusion. The department noted that the updated language was necessary to ensure full alignment with the specific allegations detailed in the affidavit used to support the seizure of domains associated with the hacking collective known as QTFY. precise representation of the ongoing cybersecurity threats facing national infrastructure.
According to the government’s legal filings, the Chinese-backed group has engaged in a sustained espionage campaign dating back to at least 2018. The list of entities subjected to these attempts is extensive, encompassing the Senate, the Federal Reserve, NASA, and several major cabinet-level departments, including the Department of Energy and the Department of Health and Human Services. However, the distinction between being targeted and being breached is significant for assessing the resilience of these organizations.
The FBI’s supporting affidavit provides specific evidence regarding the effectiveness of these attacks. For instance, investigators determined that efforts to penetrate NASA’s networks were ultimately unsuccessful because the agency had successfully implemented security patches that mitigated the vulnerabilities the hackers sought to exploit. This highlights the critical role of proactive cybersecurity hygiene in defending against sophisticated state-sponsored actors who continuously probe federal networks for weaknesses.
While the government clarified that many agencies were only targeted, the affidavit does confirm that actual intrusions occurred in other instances. Specifically, court documents allege that in September 2024, the hackers successfully infiltrated three national laboratories under the Department of Energy, as well as the National Institutes of Health and an agency within the Department of Health and Human Services. These entities are explicitly classified as victims of successful unauthorized access.
Furthermore, a joint cybersecurity advisory published earlier in the week identified additional successful data thefts involving various private sector organizations. These include unnamed defense contractors, financial institutions, and universities, all of which experienced data loss in May 2024. The advisory also highlighted that unsuccessful attempts were made against the US Senate and a hospital as recently as March 2026, indicating that the threat from these actors remains active and persistent.
The broader context of these revelations is deeply intertwined with the ongoing geopolitical rivalry between Washington and Beijing. The US government maintains that Chinese actors are engaged in a long-term strategy of cyber-espionage designed to collect sensitive information from government agencies and critical private sector partners. These allegations have led to increased scrutiny of Chinese cyber activities and a hardening of US digital defenses.