Counterintelligence — 2026-04-04

Chinese Breach of FBI Surveillance System Exposed Phone Numbers of Active Investigation Targets

A suspected Chinese intrusion into an FBI pen register and trap-and-trace system exposed phone numbers of individuals under active surveillance, potentially enabling adversaries to identify who the U.S. is monitoring and compromise intelligence assets. The FBI discovered abnormal activity on February 17 in the unclassified system used for court-authorized wiretap metadata. Access was obtained through a third party. DOJ classified the incident as major under FISMA and notified Congress. The breach is being assessed in the context of the broader Salt Typhoon campaign targeting U.S. telecom lawful intercept infrastructure.

Analysis
DCSNet is the technical backbone of FBI lawful intercept operations. Exposure of surveillance targets' phone numbers could allow MSS to identify compromised assets or FBI collection priorities against Chinese operations in the U.S. The breach echoes the Salt Typhoon campaign's targeting of telecom lawful intercept infrastructure; Beijing is systematically mapping how the U.S. conducts surveillance.

1 sources

Suspected Chinese breach of FBI system exposed surveillance targets phone numbers - Nextgov/FCW