Chinese Hackers Steal Metadata and Call Records in Massive U.S. Cyberattack: Millions Uninformed

In one of the largest intelligence breaches in U.S. history, Chinese hackers have accessed sensitive metadata and call records from millions of Americans, primarily in the Washington, D.C., area. Despite the scale of the cyberattack, most victims have not been notified, according to industry insiders.

Src: Securityweek

FBI and Telecom Providers Alert a Few Victims

The FBI, AT&T, and Verizon have selectively informed a small number of individuals—primarily high-value intelligence targets, including political figures like Donald Trump and Kamala Harris—of unauthorized access to their communications. For the majority of victims whose metadata was accessed, however, no notifications have been issued.

Metadata, which includes details such as call timestamps, phone numbers, and cell tower locations, may not contain the content of communications but remains highly valuable to intelligence agencies. “We kill people based on metadata,” said former CIA and NSA Director Gen. Michael Hayden, underscoring its significance.

Salt Typhoon: A Coordinated Cyberespionage Campaign

The ongoing hacking campaign, dubbed Salt Typhoon, has breached eight U.S. telecom and internet service providers and numerous others worldwide. According to the U.S., Australia, Canada, and New Zealand, the operation is part of Chinese intelligence efforts. While Beijing has denied these claims, cybersecurity experts note the campaign’s focus on mapping the relationships and movements of key political figures.

Privacy Concerns Mount as Notification Efforts Lag

Electronic Privacy Information Center President Alan Butler criticized telecom providers for their failure to notify affected individuals, calling the exposure of metadata a “clear violation of privacy.” Despite obligations under federal law, companies like AT&T and Verizon have only contacted a small subset of victims, often leaving others in the dark.

Telecom Companies’ Responses Vary

AT&T: Confirmed limited notifications, citing obligations to inform affected parties.
Verizon: Similarly restricted outreach to a small group of customers.
T-Mobile: Disclosed its infiltration by Salt Typhoon but emphasized that customer data remained secure.
Lumen and Charter Communications: Provided vague responses or denied ongoing threats.
Government Reluctance to Notify Metadata Victims

The FBI has clarified its role, stating it does not plan to notify individuals whose metadata was accessed. Instead, the responsibility lies with telecom providers. A senior White House official confirmed that while metadata breaches were extensive, not all Americans’ phone records were compromised.

Cybersecurity Experts Warn of Ongoing Threat

Salt Typhoon continues its aggressive campaigns, with experts urging enhanced vigilance from both telecom companies and the U.S. government. “They’re not giving up,” said T-Mobile’s Chief Security Officer Jeff Simon, emphasizing the hackers' persistence.

This breach highlights the need for stronger privacy protections, transparency from corporations, and a unified response to combat cyberespionage.

Our Sources: NBC, FBI, Hackernews

Chinese Hackers Steal Metadata and Call Records in Massive U.S. Cyberattack: Millions Uninformed