Chinese hackers breached US commerce chief’s emails; Antony Blinken warns Chinese counterpart

Secretary of state Antony Blinken made clear to China’s top diplomat Wang Yi in a meeting in Jakarta on Thursday that any action that targets the US government, US companies or American citizens “is of deep concern to us, and that we will take appropriate action to hold those responsible accountable,” said another source, a senior state department official.

On Tuesday, Microsoft revealed that a stealthy Chinese hacking operation had exploited a secret flaw in a piece of the company’s authentication software in order to covertly break into email accounts belonging to 25 unnamed organisations.

Since the news broke, several victims in addition to the Commerce Department have acknowledged they were affected, including personnel at the State Department and US House of Representatives. The intrusion activity began in May and continued for roughly one month.

The Chinese ministry of foreign affairs called the accusations “disinformation” in a statement to Reuters earlier this week.

Raimondo’s department has implemented a series of export control policies against China, curbing the transfer of semiconductors and other sensitive technologies.

Discover the stories of your interest

A commerce department spokesperson said on Wednesday that Microsoft had notified the agency of “a compromise to Microsoft’s Office 365 system, and the department took immediate action to respond.” But the spokesperson declined to comment on an intrusion against Raimondo specifically. A report by the US inspector general’s office in March sharply criticized the Commerce Department’s “fundamental deficiencies” in its cybersecurity incident response program, saying it violated security procotols, did not properly use cyber-protection tools and poorly handled simulated cyberattacks.

A senior FBI official said on Wednesday that no classified information was taken during the hacking operation. The hacking was highly targeted, accessing only email inboxes and not destroying data.