US officials revise claims that government agencies were hacked by Chinese, now say they were targets

WASHINGTON — US officials are correcting earlier statements that several government agencies were hacked by Chinese hackers, now saying that the organisations were among the hackers' targets.

In a newly edited statement, the Department of Justice said on Friday (Aug 28) that the US Senate, the Federal Reserve, NASA and others were "among the targets of QTFY," a Chinese state-sponsored hacking group that officials identified on Wednesday during an internet domain seizure operation.

A previous version of the statement said the government agencies had been among the hackers' victims.

A note left at the bottom of the newly edited statement said that "Edits have been made to ensure this press release accurately reflects the government's allegations in the affidavit in support of the domain seizures."

The DOJ said on Friday it made a correction to the press release because the August 26 release "described all agencies as victims whereas the government's affidavit made clear that all were targeted but only some were compromised."

The distinction matters because it narrows the scope of confirmed breaches in what the DOJ described as a years-long Chinese cyber-espionage campaign against US government agencies, defence contractors and other sensitive targets.

Affidavit details targets since 2018

According to the FBI affidavit released alongside the original statement, since at least 2018 the hackers "targeted" US federal networks including those of NASA, the Federal Reserve, the Department of Energy, the Department of Justice, the Department of Health and Human Services, the National Institutes of Health, and the US Senate.

A footnote in the affidavit said that the FBI investigated the targeting of NASA and found that the attempted breach of NASA was unsuccessful due to the agency's patching of targeted software.

The affidavit alleges that in September 2024, the hackers carried out "computer intrusions" at three "DOE National Laboratories, NIH, an HHS agency, and a US security device manufacturer," and referred to the entities as "victims."

A separate joint cybersecurity advisory issued by the FBI, National Security Agency and US Cyber Command's Cyber National Mission Force published on Wednesday listed successful data thefts from unnamed defence contractors, financial institutions and universities in May 2024, and unsuccessful attempts to access networks of the US Senate and a US hospital in March 2026.

Messages seeking clarification from the FBI and the Cybersecurity and Infrastructure Security Agency were not immediately returned on Friday.

The Chinese Embassy in Washington did not immediately respond to a request for comment on Friday. In response to Wednesday's announcement, an embassy spokesperson said the US uses cybersecurity to "smear or discredit China" and that China "opposes the US overstretching the concept of national security and using it as a pretext to impose ​discriminatory restrictions on Chinese companies and will firmly safeguard the legitimate rights and interests of Chinese companies."

[[nid:742537]]