Chinese Military Members Charged With 2017 Hacking of Equifax

U.S. prosecutors say that four members of the People’s Liberation Army were involved in the hacking, which exposed the sensitive data of more than 147 million people.

A group of Chinese military hackers were charged by the Justice Department for breaking into the computer networks of Equifax in 2017, causing a security breach that exposed the sensitive financial information of more than 147 million people.

All four defendants named by the Justice Department are members of the People’s Liberation Army, a Chinese military branch, and are accused of stealing the credit-reporting agency’s “trade secrets,” according to The New York Times.

In a statement on Monday, Attorney General William Barr called the hack a “deliberate and sweeping intrusion into the private information of the American people.” Equifax faced heavy criticisms in the wake of the cyber attack, leading to a $700 million settlement.

“Today, we hold PLA hackers accountable for their criminal actions, and we remind the Chinese government that we have the capability to remove the Internet’s cloak of anonymity and find the hackers that nation repeatedly deploys against us,” Barr said.

The case is similar to a 2014 indictment by the Obama Justice Department against five members of the PLA, accusing the military members of hacking into American corporations in order to steal business secrets. In addition, China’s government has faced suspicion from U.S. intelligence in the cyber attacks on Marriott International and the 2015 attack on the Office of Personnel Management, according to the Times.

In the Equifax breach, the hacking group was able to gain access to critical computer systems by taking advantage of a software vulnerability, according to prosecutors. That vulnerability allowed the attackers to obtain log-in credentials and take over accounts to view databases. The hackers were skillful in breaching the servers without being caught, often wiping their log files.

None of the accused defendants are in U.S. custody, but law enforcement officials say the point is to show that they can identify specific hackers and trace attacks back to their true sources. Barr said that the actions by hackers working on behalf of the Chinese government represent a counterintelligence threat, particularly to Americans’ data and corporations’ sensitive information.

“This kind of attack on American industry is of a piece with other Chinese illegal acquisitions of sensitive personal data,” Barr said.

About the Author

Haley Samsel is an Associate Content Editor for the Infrastructure Solutions Group at 1105 Media.

Featured

  • The Future is Happening Outside the Cloud

    For years, the cloud has captivated the physical security industry. And for good reason. Remote access, elastic scalability and simplified maintenance reshaped how we think about deploying and managing systems. But as the number of cameras grows and resolutions push from HD to 4K and beyond, the cloud’s limits are becoming unavoidable. Bandwidth bottlenecks. Latency lags. Rising storage costs. These are not abstract concerns. Read Now

  • The Impact of Convergence Between IT and Physical Security

    For years, the worlds of physical security and information technology (IT) remained separate. While they shared common goals and interests, they often worked in silos. Read Now

  • Unlocking Trustworthy AI: Building Transparency in Security Governance

    In situations where AI supports important security tasks like leading investigations and detecting threats and anomalies, transparency is essential. When an incident occurs, investigators must trace the logic behind each automated response to confirm its validity or spot errors. Demanding interpretable AI turns opaque “black boxes” into accountable partners that enhance, rather than compromise, organizational defense. Read Now

  • Seeking Innovative Solutions

    Denial, Anger, Bargaining, Depression and Acceptance. You may recognize these terms as the “5 Phases” of a grieving process, but they could easily describe the phases one goes through before adopting any new or emerging innovation or technology, especially in a highly risk-averse industry like security. However, the desire for convenience in all aspects of modern life is finally beginning to turn the tide from old school hardware as the go-to towards more user-friendly, yet still secure, door solutions. Read Now

  • Where AI Meets Human Judgment

    Artificial intelligence is everywhere these days. It is driving business growth, shaping consumer experiences, and showing up in places most of us never imagined just a few years ago. Read Now

New Products

  • Compact IP Video Intercom

    Viking’s X-205 Series of intercoms provide HD IP video and two-way voice communication - all wrapped up in an attractive compact chassis.

  • EasyGate SPT and SPD

    EasyGate SPT SPD

    Security solutions do not have to be ordinary, let alone unattractive. Having renewed their best-selling speed gates, Cominfo has once again demonstrated their Art of Security philosophy in practice — and confirmed their position as an industry-leading manufacturers of premium speed gates and turnstiles.

  • PE80 Series

    PE80 Series by SARGENT / ED4000/PED5000 Series by Corbin Russwin

    ASSA ABLOY, a global leader in access solutions, has announced the launch of two next generation exit devices from long-standing leaders in the premium exit device market: the PE80 Series by SARGENT and the PED4000/PED5000 Series by Corbin Russwin. These new exit devices boast industry-first features that are specifically designed to provide enhanced safety, security and convenience, setting new standards for exit solutions. The SARGENT PE80 and Corbin Russwin PED4000/PED5000 Series exit devices are engineered to meet the ever-evolving needs of modern buildings. Featuring the high strength, security and durability that ASSA ABLOY is known for, the new exit devices deliver several innovative, industry-first features in addition to elegant design finishes for every opening.