US Disrupts China-Linked Hacking Operation Targeting Critical Infrastructure The U.S. Justice Department announced on Wednesday the disruption of a China-affiliated hacking operation that had targeted sensitive government and private sector networks since at least 2018. The operation dismantled two key hacking platforms, QScan and QTRouter, used to infiltrate internet-connected devices and obscure the origin of cyberattacks. The hackers, linked to Nanjing Xinjiuwei Network Technology Company, allegedly served clients including China’s Ministry of State Security and the People’s Liberation Army. Targets included the U.S. Department of Justice, NASA, the Federal Reserve, the U.S. Senate, and three Department of Energy laboratories, as well as the NIH, HHS, and a U.S. security-device manufacturer. Four unnamed companies in the U.S. and South Korea were also compromised. In August 2019, the group attempted but failed to breach NASA networks. By September 2024, they successfully infiltrated multiple U.S. agencies and private entities. The hackers used QScan to infect routers and other devices, then routed attacks through QTRouter, making intrusions appear to originate from unrelated locations delaying detection and attribution. While the domain seizures disrupt the group’s operations, officials caution that the threat may persist. The takedown is part of a broader U.S. effort to counter China-sponsored cyber espionage, which has repeatedly targeted government and corporate networks, including recent breaches of Congressional and telecom systems. Neither the Chinese embassy nor Nanjing Xinjiuwei has commented on the allegations.

Iran-Linked Hacker Group Claims FBI Drone Breach, Threatens World Cup Security An Iran-affiliated hacker group, Handala, has claimed responsibility for breaching FBI-operated drones, alleging access to surveillance footage, facial recognition data, and license plate scans used for counterterrorism. The group, monitored by the SITE Intelligence Group, stated it had infiltrated the drones "for months," capturing "every image and every suspect" from first-person view (FPV) drones deployed by the FBI. In a statement released Friday, Handala issued a veiled threat against the 2026 FIFA World Cup, which began Thursday, warning that "FPVs are everywhere" and could pose risks to teams and events. The FBI is using drones to secure World Cup venues, with flights banned over stadiums and fan zones to prevent unauthorized aircraft. The U.S. Justice Department had previously warned of potential cyber retaliation from Iranian actors following U.S.-Israeli strikes on Tehran in February, which escalated regional tensions. Handala has a history of cyber operations, including a March claim of hacking the email account of an FBI official and leaking personal photos. While Handala provided alleged evidence of the drone breach, SITE disputed the authenticity of the footage, identifying one video as promotional material from a U.S. police department’s 2024 tornado response demonstration. The U.S. State Department has offered a $10 million reward for information leading to the identification of the group’s members.

DOJ’s Incomplete Redaction of Epstein Files Exposes Sensitive Email Data A recent review of court-released files related to Jeffrey Epstein has revealed that the U.S. Department of Justice (DOJ) failed to properly redact sensitive information, leaving raw email data exposed. The discovery was made by Mahmoud Al-Qudsi, founder of NeoSmart Technologies, who stumbled upon the issue while examining the documents. Al-Qudsi identified that some blacked-out sections contained base64-encoded email data a standard format for transmitting attachments over SMTP. Though the content appeared as indecipherable hex strings, cybersecurity experts and an online forensics community were able to decode and reconstruct portions of the emails. While not all files were recoverable, the incomplete redaction allowed access to information that was intended to remain confidential. The incident highlights a critical oversight in the DOJ’s handling of sensitive documents, raising concerns about the security of redacted legal filings.

DOGE Employees Under Scrutiny for Alleged Election Interference and Data Misuse The U.S. Department of Justice (DOJ) has revealed in a court filing that members of Elon Musk’s "DOGE" team at the Social Security Administration (SSA) engaged in undisclosed communications with an unnamed advocacy group aiming to overturn election results in certain states. The interactions allegedly included a signed agreement that may have involved matching Social Security data with state voter rolls a potential violation of federal privacy laws. The DOGE employees have been referred for possible Hatch Act violations, which bars government officials from using their positions for political activities. According to DOJ officials, the advocacy group approached the SSA team with a request to analyze voter rolls for evidence of fraud, though the exact states targeted remain unspecified. Further concerns arose over the unauthorized use of third-party servers, including Cloudflare, to handle sensitive data contrary to a court ruling restricting access to such information. A senior adviser to Musk and the DOGE team, Steve Davis, was reportedly copied on a March 3, 2025, email containing a password-protected file with the private data of approximately 1,000 individuals from SSA systems. It remains unclear whether the data was accessed or exploited. The DOJ stated that no evidence suggests broader SSA awareness of the communications or the "Voter Data Agreement" beyond the involved DOGE members. The investigation is ongoing, with no further details on potential legal consequences or the advocacy group’s identity.

DOJ Corrects Record on Unauthorized Sharing of Sensitive Social Security Data The U.S. Department of Justice (DOJ) recently filed a formal correction in a Maryland federal court, acknowledging that earlier statements by senior Social Security Administration (SSA) officials claiming that employees from the Department of Government Efficiency (DOGE) had their access to sensitive data revoked were false. The DOJ clarified that these officials did not know the statements were inaccurate at the time. The incident stems from March 2023, when DOGE employees detailed to the SSA shared sensitive government data via an unsecured third-party server, violating agency security protocols. The SSA remains uncertain about what specific data was exposed or whether it still exists on the server. The discrepancies came to light during an internal review last fall, with the SSA notifying the DOJ of its findings on December 10. The DOJ filed the corrections on January 16. The disclosure underscores ongoing tensions between career SSA officials and DOGE over data-sharing practices. Security experts warn that the unauthorized transfer of sensitive information risks broad exposure, with no clear record of who accessed the data or what was compromised. The incident highlights vulnerabilities in federal data handling amid interagency conflicts.

New DOJ Documents Reveal Epstein’s Alleged Ties to a "Personal Hacker" Recently unsealed Justice Department documents part of the so-called "Epstein Files" have exposed a previously undisclosed claim: in 2017, an FBI informant alleged that convicted sex offender Jeffrey Epstein employed a "personal hacker" within his inner circle. The revelation adds a cybersecurity dimension to the ongoing investigations into Epstein’s operations, though the hacker’s exact role remains unclear. The implications of such an association are significant. A personal hacker could have enabled Epstein to: - Gather sensitive information, including intercepted communications or private data. - Orchestrate security breaches, potentially targeting rivals or individuals seeking to expose his activities. - Manipulate digital evidence, possibly altering records to obscure his tracks. The FBI’s investigation into Epstein’s network now appears to extend beyond physical crimes into the digital realm, suggesting a level of sophistication that may have helped sustain his operations. The disclosure also raises broader concerns about the intersection of cybercrime and high-profile criminal enterprises, particularly regarding victim privacy and the role of digital forensics in modern investigations. As more details emerge, the alleged hacker’s involvement could provide critical insights into how Epstein maintained control over his network and how cyber tools may have been weaponized in support of his crimes. The case continues to underscore the growing importance of cybersecurity in uncovering and dismantling complex criminal organizations.

The California Attorney General's Office reported a data breach on October 14, 2016, involving the inadvertent release of personal information, including names and identification numbers. The breach was discovered on October 17, 2016, and was reported on January 20, 2017. The number of individuals affected is unknown.

The Department of Justice suffered a security breach that compromised the personal information of 20,000 FBI employees. The hackers hacked into the database of the department and compromised information contained names, titles, phone numbers, and email addresses. The department investigated the incident along with law enforcement and deployed protection and defensive measures to safeguard information.