Nation-State

US State Department Says 60,000 Emails Taken in Alleged Chinese Hack

The US State Department said that hackers took around 60,000 emails in an attack which Microsoft has blamed on China.

China

The US State Department said Thursday that hackers took around 60,000 emails, although none of them classified, in an attack which Microsoft has blamed on China.

Microsoft revealed in July that a Chinese hacking group had breached its email platform and accessed messages from around 25 organizations including US government agencies.

“It was approximately 60,000 unclassified emails that were exfiltrated as a part of that breach,” State Department spokesman Matthew Miller told reporters.

“Classified systems were not hacked. These only related to the unclassified system,” he said.

Miller said that the State Department has not formally assigned blame but had no reason to doubt Microsoft’s finding that the hackers were from China.

US Secretary of State Antony Blinken raised the hacking in July when he met with senior Chinese official Wang Yi in Jakarta on the sidelines of a Southeast Asian meeting.

Advertisement. Scroll to continue reading.

The United States has described China as its top competitor, with Blinken earlier Thursday saying that Beijing was determined to replace the United States as the world’s top power.

A State Department report issued Thursday warned in dire terms about China’s efforts in the information sphere, saying that Beijing’s “digital authoritarianism” and disinformation could reshape the world if unchecked.

Related: Chinese Cyperspies Use Stolen Microsoft Key to Hack Gov Emails

Related: Microsoft Bows to Pressure to Free Up Cloud Security Logs

Related: Microsoft Warns of Office Zero-Day Attacks, No Patch Available

Related: Microsoft Blames Russian APT for Outlook Zero-Day Exploits

Related Content

Malware & Threats

Cisco Talos linked SD-WAN key-stealing malware to infrastructure overlapping Volt Typhoon’s Silent Train network, which Lumen detailed.

Vulnerabilities

The attackers chained PHP2Shell and Fragnesia exploits and hacked two servers of a US government-affiliated organization.

Artificial Intelligence

Xint says a flaw in OpenAI’s compaction process let researchers move reasoning traces between models, potentially making it cheaper to distill a rival AI.

Artificial Intelligence

The state-sponsored hackers targeted hundreds of organizations and gained privileged access to some environments.

Artificial Intelligence

The DHS said agencies should remove DeepSeek products as well as third-party products and services developed using DeepSeek from their IT systems.

Artificial Intelligence

Tasked with writing an application for a US defense contractor, the model made the code 19% more likely to be hackable.

Artificial Intelligence

At least three threat actors have been abusing Cairn for persistent access and financial theft.

Vulnerabilities

Armory Castle exploited CVE-2026-102764 for initial access, deployed custom tools, and deleted logs and artifacts.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version