Counterintelligence — 2026-04-08

FBI Classifies Chinese Breach of DCSNet Surveillance System as Major Cyber Incident; Salt Typhoon Suspected

The FBI formally classified a suspected Chinese hack of its Digital Collection System Network as a major incident under FISMA and notified Congress. The breach targeted DCS-3000 (Red Hook), exposing phone numbers and metadata of individuals under active FBI investigation. Salt Typhoon, linked to China's MSS, is the primary suspect. The intrusion was detected February 17 after abnormal log activity, with attackers leveraging a commercial ISP vendor infrastructure to access the unclassified surveillance system.

Analysis
Salt Typhoon has now compromised FBI surveillance infrastructure on top of prior breaches of all three major US cellular providers. The DCSNet breach exposes active investigation targets at the same time the FBI has lost 300+ national security agents through firings and attrition, a compounding of collection compromise and capacity degradation without modern precedent.
3 sources
  1. Breach of FBI Surveillance System Considered a Major Incident - Security Magazine
  2. FBI hit by hackers inside surveillance and wiretap system - Cybernews
  3. FBI notified Congress last week of China-linked hack deemed major incident - Fox News

View in full brief →

UNCLASSIFIED // OPEN SOURCE