U.S. officials revealed that hackers with ties to the Chinese government compromised several American internet providers in a large-scale cybersecurity breach. The attack, known as “Salt Typhoon,” is part of an ongoing effort by state-sponsored groups in Beijing to infiltrate critical U.S. infrastructure.
The Salt Typhoon operation specifically targeted broadband networks, seeking to access sensitive information from users and databases, officials said. This breach is the latest in a series of Chinese hacking campaigns that carry the “Typhoon” moniker.

Authorities also disclosed the recent disruption of a network consisting of more than 200,000 internet-connected devices, including routers and cameras. This network was being exploited by another Chinese-linked hacking group, known as “Flax Typhoon.” These actions follow earlier cyber efforts by a group identified as “Volt Typhoon.”
Chinese state-sponsored hackers previously compromised critical services in the U.S., including water treatment facilities and oil and gas pipelines, sparking concerns about national security and public safety.
The Biden administration has warned that these hacking operations could threaten American lives and disrupt U.S. support for Taiwan, amid growing tensions in the region.
China has denied the allegations, but cybersecurity experts and U.S. officials remain concerned about the impact of these ongoing cyber exploits.