Chinese hackers were able to breach US National Guard and stay undetected for months

• The Department of Homeland Security says Salt Typhoon accessed National Guard systems
• Hackers were present between March and December 2024
• The group stole vital intelligence and personally identifiable information

A Chinese state-sponsored threat actor known as Salt Typhoon was lurking in the network of the US Army National Guard for nine months, the US Government has confirmed.

TheDepartment of Homeland Security (DHS) said the attackers were present in the networks between March and December 2024.

During this time, the group stole sensitive data from its victims, including administrator credentials, network traffic diagrams, geographical maps, and personally identifiable information (PII) of service members. Furthermore, the attackers accessed data traffic between the state’s network and every other US state, and at least four additional territories. This means that they could have pivoted to other networks as well, compromising even more government and military targets.