For years, the United States has been the target of relentless cyberattacks orchestrated by China. Now, the U.S. government is taking decisive action. The Department of Justice (DOJ) has charged 12 Chinese nationals, including officials from China’s Ministry of Public Security (MPS) and employees of a private technology company, i-Soon, with crimes related to hacking and cyber espionage.

These individuals are accused of carrying out state-sponsored attacks that infiltrated critical U.S. infrastructure, stole sensitive government data, and even targeted American dissidents for surveillance. The FBI, DOJ, Department of State, and the Treasury Department have now launched a multi-agency effort to expose and counteract these cyber threats.

“The charges announced today expose the PRC’s continued attempts to spy on and silence anyone it deems threatening to the Chinese Communist Party,” said Leslie R. Backschies, Acting Assistant Director in Charge of the FBI.

These attacks are not random acts by independent hackers. They are part of a larger, coordinated effort by the Chinese government to undermine U.S. national security. The United States must act decisively to put an end to this growing cyber warfare.

Who Has Been Charged?

The indictment names multiple individuals directly involved in China’s hacking operations, including:

• Zhou Shuai and Yin Kecheng – Key members of Advanced Persistent Threat 27 (APT27), also known as Budworm, Bronze Union, Emissary Panda, Lucky Mouse, and Iron Tiger. These hackers have been linked to multiple breaches of U.S. networks.
• Eight employees of i-Soon – A Chinese tech company that acted as a front for cyber operations, conducting hacking missions at the behest of the Chinese government.
• Two officers of China’s Ministry of Public Security (MPS) – These officials helped fund and coordinate hacking campaigns against U.S. targets.

The DOJ made it clear that these individuals were not acting alone, but were part of a government-backed network that profited off stolen data. According to the court filings, i-Soon charged between $10,000 and $75,000 per hacked email inbox, turning cybercrime into a lucrative business.

“These malicious cyber actors, acting as freelancers or as employees of i-Soon, conducted computer intrusions at the direction of the PRC’s MPS and Ministry of State Security (MSS) and on their own initiative,” the DOJ stated.

In other words, this was not just cyber espionage—it was organized digital warfare, carried out with the full knowledge and approval of the Chinese Communist Party.

The Damage Done: A Direct Attack on America

The cyberattacks linked to i-Soon and APT27 have caused widespread damage to U.S. national security and key industries. These hackers have targeted critical American institutions, including:

• The U.S. Treasury Department – Hackers accessed employee workstations and sensitive documents in what was described as a “major breach.”
• U.S. defense, healthcare, and communications sectors – The stolen information could be used for espionage, sabotage, or even cyber-enabled warfare.
• American dissidents and religious organizations – Affected groups include a missionary organization that was openly critical of the Chinese government.
• A Hong Kong newspaper – The publication was known for its opposition to Beijing, further proving that China’s cyber operations extend beyond national security and into suppressing free speech worldwide.
• Foreign ministries in Asia – Hackers breached government networks in Taiwan, India, South Korea, and Indonesia, highlighting China’s global ambitions.

This level of cyber aggression is not new. Last year, Chinese hackers infiltrated two major U.S. presidential campaigns, raising concerns about foreign interference in American elections. China has also been linked to hacking incidents involving the UK Electoral Commission and the parliaments of the UK and New Zealand.

China’s actions go far beyond simple data theft. These cyber intrusions threaten democracy, national security, and economic stability worldwide.

China’s State-Sponsored Cyber Warfare

What makes this case particularly alarming is the direct involvement of the Chinese government. Unlike independent hacker groups, these cybercriminals were working under contract with the Chinese Ministry of Public Security and Ministry of State Security.

Court documents reveal that China used a network of private companies and contractors to infiltrate foreign networks while obscuring its direct involvement. The goal was twofold:

1. Steal classified information from U.S. government agencies, private companies, and individuals.
2. Suppress political opposition by targeting dissidents, activists, and critics of the Chinese Communist Party.

China has denied any involvement in these cyberattacks, calling U.S. allegations “baseless.” However, the evidence tells a different story. The DOJ’s findings show that i-Soon and other hacker groups were paid millions by the Chinese government for stolen data.

The U.S. Rewards for Justice program is now offering up to $10 million for information on i-Soon and its employees. Additionally, the State Department has announced a $2 million bounty for the arrest of Zhou Shuai and Yin Kecheng.

These steps send a strong message, but will they be enough?

The U.S. Strikes Back

The United States is taking a multi-agency approach to counter China’s cyber threats. The FBI, DOJ, Treasury, and State Department have launched a coordinated response, including:

• Economic sanctions on Chinese hackers and their companies.
• Bounties for information leading to the arrests of key cybercriminals.
• Seizure of four domain names linked to i-Soon’s operations, including ecoatmosphere.org, newyorker.cloud, heidrickjobs.com, and maddmail.site.
• Increased cybersecurity funding for government agencies and critical infrastructure.

“We will continue to fight to dismantle this ecosystem of cyber mercenaries and protect our national security,” said Sue J. Bai, head of the DOJ’s National Security Division.

The battle for cybersecurity is just beginning. The latest indictments expose China’s long-running strategy to exploit digital warfare as a tool of national power. The United States must now decide: Will we continue to react, or will we take the offensive against this growing threat?

As China’s cyber army grows more sophisticated, the stakes have never been higher. This is not just a matter of cybersecurity—it’s a fight for national security, economic stability, and the very foundation of democracy.