China arrested hackers suspected of OPM hack

The Chinese Government says it has arrested the hackers responsible for breaching the Office of Personnel Management database (OPM).

The Chinese government has arrested hackers accused of breaking into the Office of Personnel Management databases,

According to The Washington Post, the Chinese government has arrested the hacking crew that breached the Office of Personnel Management (OPM).

“The Chinese government recently arrested a handful of hackers it says were connected to the breach of Office of Personnel Management’s database earlier this year, a mammoth break-in that exposed the records of more than 22 million current and former federal employees.” states The Washington Post. “The arrests took place shortly before a state visit in late September by President Xi Jinping, and U.S. officials say they appear to have been carried out in an effort to lessen tensions with Washington.”

The authorities arrested the suspects prior to Chinese President Xi Jinping’s state visit in the US in September. China and US reached an agreement during Xi’s state visit that established a mutual commitment to suspend all activities of cyber espionage and hacking.

There is no news regarding the identities of the suspects, neither the connection with the Chinese government.

The Chinese Government has always denied any involvement with the OPM hack that exposed the personal data of 21.5 million federal employees and others sensitive information.

The US Intelligence believes that the OPM hack is the result of a cyber espionage operation conducted by a nation-state actor.

“If the individuals detained were indeed the hackers, the arrests would mark the first measure of accountability for what has been characterized as one of the most devastating breaches of U.S. government data in history.” continues the Post.

“We don’t know that if the arrests the Chinese purported to have made are the guilty parties,” said one U.S. official, who like others interviewed spoke on condition of anonymity because of the subject’s sensitivity. “There is a history [in China] of people being arrested for things they didn’t do or other ‘crimes against the state.’ “

The Obama administration announced that it was defining economic sanctions against China as a response to continuous hacking campaigns against government entities and private firms.

Is it really the beginning of an effective collaboration?

“I think that China has realized that this is an issue that really matters to the United States, and that if they’re going to continue to manage the relationship with us in a positive way, they had to figure out some way to address our concerns,” an anonymous U.S. official told the Washington Post.

Pierluigi Paganini

(Security Affairs – OPM, hacking)

Pierluigi Paganini

Pierluigi Paganini is member of the ENISA (European Union Agency for Network and Information Security) Threat Landscape Stakeholder Group and Cyber G7 Group, he is also a Security Evangelist, Security Analyst and Freelance Writer. Editor-in-Chief at "Cyber Defense Magazine", Pierluigi is a cyber security expert with over 20 years experience in the field, he is Certified Ethical Hacker at EC Council in London. The passion for writing and a strong belief that security is founded on sharing and awareness led Pierluigi to find the security blog "Security Affairs" recently named a Top National Security Resource for US. Pierluigi is a member of the "The Hacker News" team and he is a writer for some major publications in the field such as Cyber War Zone, ICTTF, Infosec Island, Infosec Institute, The Hacker News Magazine and for many other Security magazines. Author of the Books "The Deep Dark Web" and “Digital Virtual Currency and Bitcoin”.

Recent Posts

Fintech firm Figure disclosed data breach after employee phishing attack

Fintech firm Figure confirmed a data breach after hackers used social engineering to trick an…

19 hours ago

U.S. CISA adds a flaw in BeyondTrust RS and PRA to its Known Exploited Vulnerabilities catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in BeyondTrust RS and…

20 hours ago

Suspected Russian hackers deploy CANFAIL malware against Ukraine

A new alleged Russia-linked APT group targeted Ukrainian defense, government, and energy groups, with CANFAIL…

1 day ago

New threat actor UAT-9921 deploys VoidLink against enterprise sectors

A new threat actor, UAT-9921, uses the modular VoidLink framework to target technology and financial…

2 days ago

Attackers exploit BeyondTrust CVE-2026-1731 within hours of PoC release

Attackers quickly targeted BeyondTrust flaw CVE-2026-1731 after a PoC was released, enabling unauthenticated remote code…

2 days ago

Google: state-backed hackers exploit Gemini AI for cyber recon and attacks

Google says nation-state actors used Gemini AI for reconnaissance and attack support in cyber operations.…

2 days ago

This website uses cookies.