In January 2018, the Naval Undersea Warfare Centre (NUWC) in Newport, Rhode Island, suffered a severe malware-driven data breach orchestrated by Chinese state-sponsored hackers under the Winnti Umbrella campaign. The attackers exploited a contractor’s system to infiltrate NUWC’s network, exfiltrating 614GB of highly sensitive data, including classified details of Project Sea Dragon—a critical undersea warfare initiative. The breach was part of a decade-long espionage operation targeting U.S. military and political entities, aiming to compromise national security assets. The stolen data likely included proprietary defense technologies, operational plans, and intelligence, posing a direct threat to U.S. naval capabilities. The incident underscored vulnerabilities in supply chain security, as third-party contractors became the entry point for advanced persistent threats (APTs). The breach’s scale and the nature of the compromised data suggest long-term strategic consequences, including potential advancements in adversarial military technology and compromised U.S. defense secrecy.