In Secret Meeting, China Acknowledged Role in U.S. Infrastructure Hacks
A senior Chinese official linked intrusions to escalating U.S. support for Taiwan
By Dustin Volz April 10, 2025 1:54 pm ET1/2
WASHINGTON—Chinese officials acknowledged in a secret December meeting thatBeijing was behind a widespread series of alarming cyberattacks on U.S. infrastructure, according to people familiar with the matter, underscoring how hostilities between the two superpowers are continuing to escalate.
The Chinese delegation linked years of intrusionsintocomputer networksat U.S. ports, water utilities, airports and other targets, to increasing U.S. policy support for Taiwan, the people, who declined to be named, said.
The first-of-its-kind signalat a Geneva summit with the outgoing Biden administration startled American officials used to hearing their Chinese counterparts blame the campaign, which security researchers have dubbed Volt Typhoon, on a criminal outfit, or accuse the U.S. of having an overactive imagination.
U.S. officials went public last year with unusually dire warnings about the uncovered Volt Typhoon effort. They publicly attributed it toBeijing trying to get a footholdin U.S. computer networks so its army could quickly detonate damaging cyberattacks during a future conflict.
The Chinese official’s remarks at the December meeting were indirect and somewhat ambiguous, but most of the American delegation in the roominterpreted it as a tacit admission and a warningto the U.S. about Taiwan, a former U.S. official familiar with the meeting said.
In the months since the meeting, relations between Washington and Beijing have sunk to new lows, locked in a historic trade war. Top Trump administration officials have said thePentagon will pursuemore offensive cyber strikes against China. Beijing has continued to mine its extraordinary access to U.S. telecommunications network enabled by a separate breach, attributed toSalt Typhoon, U.S. officials and lawmakers say.
The administration also plans to dismiss hundreds of cybersecurity workers in sweeping job cuts and last week fired the director of the National Security Agency and his deputy, fanning concerns from some intelligence officials and lawmakers that the government would be weakened in defending against the attacks.
Officials say Chinese hackers’targeting of civilian infrastructurein recent years presents among themost troubling security threatsfacing the Trump administration.
In a statement, the State Department didn’t comment on the meeting but said the U.S. had made clear to Beijing it will “take actions in response to Chinese malicious cyber activity,” describing the hacking as “some of the gravest and most persistent threatsto U.S. national security.” The Trump White House National Security Council declined to comment.
The Chinese embassy in Washington didn’t respond to specific questions about the meeting, but accused the U.S. of “using cybersecurity to smear and slander China” and spreading disinformation about “so-called hacking threats.”
During the half-day meeting in Geneva,Wang Lei, a top cyber officialwith China’s Ministry of Foreign Affairs, indicated that theinfrastructure hacksresulted from the U.S.’s military backing of Taiwan, an island Beijing claims as its own, according to current and former U.S. officials familiar with the conversation.
Wang or the other Chinese officials didn’t directly state that China was responsible for the hacking, the U.S. officials said. But American officials present and others later briefed on the meetingperceived the commentsas confirmation of Beijing’s role andwas intended to scare the U.S.from involving itself if a conflict erupts in the Taiwan Strait.
https://archive.is/EmTpt#selection-149.23-2750.0