CCP Hack Targeted Millions, Threatens U.S. National Security

The United States just learned that a broad, state-backed Chinese cyber campaign may have reached into American life in a way few expected, touching telecommunications, government systems, and even private conversations, and the implications demand a firmer, clearer national response.

Officials now say the operation, known publicly as Salt Typhoon, appears to be the work of actors tied to Chinese intelligence services and may have persisted for years. That level of access to networks and communications is an affront to American sovereignty and a direct challenge to our national security posture. The scale and audacity of the campaign mean this is not an isolated criminal enterprise but a coordinated effort backed by state resources.

What makes Salt Typhoon particularly worrying is its reach into everyday life, including telephone systems that ordinary Americans use for routine calls. Experts have described the operation as close to a population-wide wiretap, able to intercept calls that range from mundane family chatter to conversations involving top officials. If ordinary domestic communications are vulnerable, then the integrity of critical government and commercial systems is at grave risk.

A former FBI official claims that it’s likely every American has been impacted by a Chinese-state-sponsored cyberattack.

International law enforcement agencies, including the FBI and National Security Agency, issued a joint advisory in September warning the public that CCP-sponsored actors are “targeting” many aspects of American lives, including telecommunications, government, transportation, lodging and military infrastructure networks.

The cyberattack wasn’t limited to the U.S. and targeted many countries around the globe, according to the advisory. According to the international agencies, the three Chinese companies believed to be behind Salt Typhoon work for China’s intelligence services, which include units in the People’s Liberation Army and Ministry of State Security.

Cybersecurity leaders have warned that the perpetrators gained footholds and exfiltrated data over multiple years, which is an almost unprecedented level of persistence. That kind of long-term access implies careful planning, significant resources, and a strategic objective beyond simple espionage for short-term gain. The involvement of companies linked to state intelligence increases the likelihood that this campaign served national strategic aims for Beijing.

There is a practical problem for China if they hoped to monitor all American calls directly: sheer manpower and logistics make mass, individualized surveillance impossible. What they can do is target high-value communications, capture automated or aggregated data, and install capabilities inside critical infrastructure that give broad visibility. That selective but wide-reaching approach means anyone from local officials to top national leaders could have been observed.

Pete Nicoletti, chief information security officer at Check Point, told Fox News Digital that those behind the Salt Typhoon cyberattack had unprecedented access to phone calls being placed by Americans.

“They had full rein access,” Nicoletti, said. “So, you know, your grandmother calling you to remind you to pick up groceries was not a targeted person and they’re gonna listen into that call. But Trump, Vance, Kamala Harris, and dozens of other U.S. government officials were specifically targeted.”

Nicoletti said the Salt Typhoon hackers “established a foothold and exfiltrated data for five years,” which is “almost unprecedented.”

From a strategic perspective, Beijing has been conducting long-term intelligence investments across many domains, and this campaign fits that pattern. Whether aimed at military planning, political leverage, economic advantage, or simply mapping U.S. infrastructure, the intelligence haul from such access would be enormous. Our response must start with recognizing that this is not business as usual between great powers but aggressive intelligence activity by a rival.

The broader context matters: recent AI-driven cyber operations and unusual land acquisitions near U.S. military bases paint a picture of a nation preparing for competition across multiple fronts. China operates on long timelines and thinks in strategic cycles that span decades, but demographic and economic pressures suggest Beijing may believe it faces a narrowing window. That makes its intelligence activity more urgent and more dangerous for American interests.

Domestic policy should reflect the reality that this is a challenge to national security, not a mere tech problem. Hardened defenses, better information sharing between private sector and government, and clearer rules for the supply chains that support telecommunications and critical infrastructure are all necessary. At the same time, Congress and the administration must insist on a posture that deters further intrusions and makes clear there are political and economic costs for state-backed cyber aggression.

We cannot afford complacency when a foreign power’s reach appears to include our phones, networks, and public systems. Americans expect their government to protect not only classified secrets but the everyday privacy and safety of the population. That expectation demands decisive action, stronger oversight, and a national strategy that treats cyber intrusion as the strategic threat it is.