A Chinese national, Xu Zewei, has been arrested in Italy on suspicion of hacking into multiple U.S. universities to steal research related to COVID-19. This arrest was announced by authorities in Houston, Texas, where Xu faces a nine-count indictment for alleged computer intrusions that took place between February 2020 and June 2021. Another individual, Zhang Yu, has also been indicted but remains at large.
According to court documents, Xu and his alleged accomplices targeted various U.S. institutions, including those involved in the research of COVID-19 vaccines and treatments. U.S. Attorney Nicholas J. Ganjei described these hacking activities as violations of intellectual property rights and threats to American scientific innovation, although specific universities involved were not disclosed. It is noted that two of the targeted institutions are located in the Southern District of Texas.
The indictment suggests that Xu and Zhang were affiliated with a group known as HAFNIUM, which is accused of breaching over 60,000 U.S. entities and successfully compromising more than 12,700 to extract sensitive information. Among the victims was a law firm with a global presence, including operations in Washington, D.C.
Xu faces serious charges that include wire fraud and aggravated identity theft, with potential penalties of up to 20 years in prison for the wire fraud charges. The case reflects ongoing tensions regarding cybersecurity and espionage, particularly involving Chinese nationals. A spokesman for the Chinese Embassy in Washington has not yet commented on the situation. The recent arrest follows earlier announcements from the Justice Department regarding additional espionage-related charges against other Chinese nationals operating within the U.S.