Chinese threat actors may have already breached UK critical infrastructure, ministers told

A group of 7 hackers, 6 slightly blurred in the background and one in the foreground, all wearing black with hoods pulled up over their heads. You cannot see their faces. The hacker in the foreground sits with an open laptop in front of them. The background, behind the hackers, is a Chinese flag
(Image credit: Getty Images)

Chinese state-sponsored threat actors may have already breached critical IT infrastructure in the UK, some government officials have claimed..

After taking power, some senior ministers in the Labour government were notified hacking collectives with ties to the Chinese government most likely compromised supply chains and computer infrastructure belonging to certain “vital services”.

Bloomberg, citing people familiar with the matter, who agreed to speak of matters of national security if their identities remain hidden.

China denies all accusations

Hackers are systemic, and their attacks reach a lot wider and deeper than the government decided to make public. In fact, successive governments decided not to go fully public with their knowledge on this topic, it was said, especially since the matter was being considered by the new administration.

The targets were not named, and the Chinese embassy in the UK did not comment.

Western governments, as well as cybersecurity researchers, often attribute different cyberattacks on China and its state-sponsored groups. For example, earlier this month it was reported that a group known as Salt Typhoon hijacked government systems to breach several American broadband providers and gained access to the interception portals required by US law.

Among the breached were US telecoms giants Verizon and AT&T, as well as ISP Lumen Technologies, where hackers may have had access to a ‘vast collection of internet traffic’ for months, including court-ordered wiretaps collected in the name of national security.

Also, last year a major incident was unveiled, when Microsoft discovered a threat actor tracked as Storm-0558 was able to access US government email accounts. Around July last year, the group accessed more than two dozen Microsoft email accounts belonging to various organizations in the West, including several US government agencies.

China has vehemently denied all the accusations, instead describing the US as the real cyber-bully.

More from TechRadar Pro

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Read more
China
US Treasury declares ‘major incident’ after apparent state-sponsored Chinese hack
China
Microsoft says Chinese Silk Typhoon hackers are targeting cloud and IT apps to steal business data
cybersecurity
Chinese government hackers allegedly spent years undetected in foreign phone networks
China
Chinese hackers who targeted key US infrastructure charged by Justice Department
An American flag flying outside the US Capitol building against a blue sky
More alleged Chinese intrusions into the US Treasury revealed
China
Chinese hackers develop effective new hacking technique to go after business networks
Latest in Security
cybersecurity
Chinese government hackers allegedly spent years undetected in foreign phone networks
Data leak
A major Keenetic router data leak could put a million households at risk
Code Skull
Interpol operation arrests 300 suspects linked to African cybercrime rings
Insecure network with several red platforms connected through glowing data lines and a black hat hacker symbol
Multiple routers hit by new critical severity remote command injection vulnerability, with no fix in sight
Code Skull
This dangerous new ransomware is hitting Windows, ARM, ESXi systems
An abstract image of a lock against a digital background, denoting cybersecurity.
Critical security flaw in Next.js could spell big trouble for JavaScript users
Latest in News
OpenAI logo
OpenAI just launched a free ChatGPT bible that will help you master the AI chatbot and Sora
Monster Hunter Wilds
Monster Hunter Wilds Title Update 1 launches in early April, adding new monsters and some of the best-looking armor sets I need to add to my collection
Zotac Gaming RTX 5090 Graphics Card
Nvidia Blackwell stock woes are compounded by price hikes as more RTX 5090 GPUs soar in pricing, and I’m sick and tired of it all at this point
A collage of Elizabeth Olsen's Scarlet Witch and Tatiana Maslany's She-Hulk
Marvel fans are already tired of Doomsday and Secret Wars cast gossip as two more superheroes get linked with roles in the next two Avengers movies
Four operators survey Verdansk. One holds a sniper rifle, one binoculars, another holds is landing with their parachute, while the last wears a skull mask
New Call of Duty: Warzone trailer shows a beautiful rebuilt Verdansk, but some fans want more: 'it won't be the same unfortunately'
An Apple Music pink/pixellated poster advertising DJ with Apple Music
DJ with Apple Music lands, allowing subscribers to build and mix DJ sets directly from its +100 million-song catalog