China Accused of Hacking into US Federal Bureau of Investigation Computer Systems

Post Views: 8

The FBI Classifies a Suspected China-Linked Cyber Intrusion as a Major Incident

The Federal Bureau of Investigation (FBI) has determined that a recent cyber intrusion into one of its internal surveillance systems constitutes a “major incident.” This designation, made under federal data security regulations, indicates that sensitive information stored on FBI systems may have been compromised.

The suspected intrusion is believed to be linked to China.
The FBI notified Congress on March 4 about the investigation into the suspicious activity affecting a system containing law enforcement-sensitive information.
Although the FBI did not publicly attribute the attack at the time, officials familiar with the matter stated that China is suspected to be behind the intrusion.

Classification and Notification Requirements

The FBI’s classification of the incident under the Federal Information Security Modernization Act places it among a limited number of breaches deemed serious enough to threaten national security or public confidence.

Under this law, agencies must notify lawmakers within seven days if an intrusion is likely to cause demonstrable harm.

Sensitive Data Compromised

According to information provided to Congress, the attackers gained access to sensitive data, including personally identifiable information and surveillance-related records.

“Such declarations are rare and reflect a high threshold,” said Cynthia Kaiser, a former deputy assistant director in the FBI’s cyber division. “I was not aware of a similar determination involving FBI systems in recent years.”

Intrusion Details

The entry point of the intrusion appears to have been through infrastructure linked to a commercial internet service provider. The method used was described as indicative of sophisticated tactics.

While officials have not disclosed what specific findings led to the classification of the incident as a major one, it remains unclear whether an interagency response mechanism mandated under federal guidelines has been fully activated.

Concerns and Implications

The breach has raised questions about vulnerabilities within even highly secure systems, and authorities have acknowledged that while the FBI acted quickly to address the intrusion, further investigation is needed.

Past operations have included intrusions into telecommunications networks and critical infrastructure, enabling access to sensitive communications and operational data.

Response and Containment

A meeting involving officials from the FBI, National Security Agency, and the Cybersecurity and Infrastructure Security Agency was held at the White House in early March to discuss the incident.