Chinese Hacking Group “Salt Typhoon” Allegedly Steals Vast Metadata Trove from U.S. Telecoms

In an alarming development, a Chinese cyberespionage group, identified as “Salt Typhoon,” has reportedly stolen a significant amount of Americans’ metadata in an extensive hacking campaign targeting U.S. telecommunications infrastructure, according to a senior U.S. official.

While specific figures remain undisclosed, the official confirmed that the breach affected “a large number of Americans” and is ongoing. When asked whether the breach encompassed metadata from every American cellphone, the official clarified, “We do not believe it’s every cellphone in the country, but a potentially large number of individuals the Chinese government focused on.”

The hackers have infiltrated dozens of global companies, including at least eight U.S.-based telecommunications and infrastructure firms. Previous reports suggested that Verizon, AT&T, T-Mobile, and Lumen were among the targets. While T-Mobile and Lumen denied breaches of customer data, other cases reportedly involved the theft of call metadata and telephone audio intercepts.

Call record metadata comprises details such as who placed a call, its duration, and the call’s location—though not the content of the call. Despite lacking the actual conversations, bulk metadata can provide deep insights into a person’s life, relationships, and movements, posing serious security and privacy concerns.

The U.S. government has escalated its response to the Salt Typhoon campaign, with President Joe Biden being briefed multiple times on the breaches. Federal agencies, including the FBI, the Cybersecurity and Infrastructure Security Agency (CISA), and the National Security Council, have prioritized countermeasures against the ongoing espionage.

In parallel with a press briefing, U.S. agencies conducted a classified session for senators, highlighting Salt Typhoon’s infiltration of American telecommunications networks. Participants included high-ranking officials such as FBI representatives, Director of National Intelligence Avril Haines, and Federal Communications Commission Chair Jessica Rosenworcel.

This breach underscores the growing threat of Chinese cyberespionage and its capacity to compromise critical U.S. infrastructure. While details remain scarce, the incident raises questions about the resilience of American cybersecurity and the need for enhanced protective measures to secure sensitive data against foreign adversaries.

As the federal government intensifies its efforts, further updates are anticipated regarding the scope of the breach and the measures being implemented to prevent future attacks.