Chinese intelligence services have carried out a significant cyber-espionage operation that breached email systems used by staff working for some of the most powerful committees in the U.S. House of Representatives. The intrusions, discovered in December, affected aides connected to committees dealing with China policy, foreign affairs, intelligence, and armed services.
According to people familiar with the incident, the operation is part of a long-running campaign known as Salt Typhoon, which has been active for several years. The campaign is linked to China’s intelligence apparatus and is designed to quietly collect sensitive communications and metadata across U.S. networks. While it remains unclear whether the emails of elected lawmakers themselves were accessed, the compromise of staff accounts alone could offer valuable insight into congressional priorities, internal discussions, and policy planning.
Salt Typhoon is not limited to email access. Those tracking the campaign say it has enabled the interception of unencrypted phone calls, text messages, and voicemails across U.S. telecommunications networks, and has reportedly captured communications involving senior American officials over recent years. The scale of access has raised alarm among U.S. security officials, who warn that anyone not using strong encryption may be exposed.
The episode highlights broader weaknesses in U.S. communications infrastructure. Many networks were built at a time when cybersecurity threats were not a central concern, and upgrading them to withstand sophisticated state-backed attacks would require enormous investment. As a result, protections have lagged behind the growing capabilities of foreign intelligence services.
Salt Typhoon is one of several cyber-espionage efforts attributed to China that target U.S. infrastructure. Previous operations have focused on sectors such as energy, transportation, and communications, potentially laying the groundwork for strategic leverage in the event of heightened tensions or conflict.
Chinese officials have rejected the allegations, saying China opposes what it describes as speculation and smearing under the banner of cybersecurity. Meanwhile, the affected congressional committees have declined to comment publicly on the breach.
Overall, the incident underscores how cyber-espionage has become a persistent and deeply embedded feature of modern geopolitical competition, with legislative bodies now firmly within the crosshairs.
