A sustained cyber-espionage campaign lasting over a year was conducted by the Chinese state-aligned threat actor TA423 (Leviathan/APT40) against entities involved in the Taiwan Strait offshore wind farm project, a critical infrastructure initiative in the contested South China Sea. The attack, executed via phishing, targeted operational data, strategic communications, and potentially proprietary energy sector intelligence tied to regional geopolitical tensions. While the article does not specify data exfiltration outcomes, TA423’s historical focus on defense, government, and diplomatic entities—coupled with its alignment with Chinese military-political objectives—suggests the operation aimed to compromise sensitive operational plans, contractual agreements, or geospatial data related to the wind farm. Such breaches could undermine the project’s security, provide China with leverage in territorial disputes, or disrupt energy supply chains in a region already fraught with geopolitical volatility. The attack’s prolonged duration and APT-level sophistication indicate a high-risk intrusion with potential cascading effects on regional energy stability and diplomatic relations.