Get all your news in one place.
100’s of premium titles.
One app.
Start reading
TechRadar
TechRadar
Sead Fadilpašić

FBI says its investigating claims its systems were compromised - wire taps and search warrants apparently hijacked

Person with warning notification and spam message icon on mobile phone.

  • FBI confirms suspicious activity on internal networks
  • Breach reportedly affected wiretap and surveillance systems
  • Media suspect Chinese group Salt Typhoon involvement

The FBI has said it addressed a recent apparent cyber-incident affecting wiretaps and surveillance systems.

“The FBI identified and addressed suspicious activities on FBI networks, and we have leveraged all technical capabilities to respond,” the law enforcement agency told CNN, without elaborating further.

While the FBI did not specifically say which systems it was securing, CNN said the breach affected systems used to manage wiretapping and foreign intelligence surveillance warrants, citingan anonymous source “familiar with the investigation”.

Another 'typhoon'?

Just as any other major organization, government or private sector, the FBI is under a constant barrage of cyberattacks. It is of particular interest to state-sponsored threat actors coming from countries such as Russia, North Korea, China, and Iran, and has been breached in the past.

In November 2021, attackers compromised a system used by the FBI to send notifications from the Law Enforcement Enterprise Portal. They managed to send more than 100,000 fake warning emails about a supposed cyberattack. The emails appeared to come from legitimate FBI addresses and warned about attacks by the hacker group TheDarkOverlord.

A year later, attackers infiltrated the InfraGard program (an FBI-run partnership with private companies that share cybersecurity intelligence) by impersonating corporate executives and obtaining memberships. Then, they tried to sell the access on a cybercrime forum.

While the FBI did not say who was behind the breach, the media are suspecting Chinese group Salt Typhoon might be involved, since the same threat actor compromised US federal government systems used for court-authorized network wiretapping requests back in 2024.

Salt Typhoon is known for high-level cyber-espionage campaigns on behalf of the Chinese government. Their biggest achievement was breaching into all major US telecommunications providers (AT&T, Verizon, Lumen, Charter Communications, Consolidated Communications, Comcast, Digital Realty, and Windstream), as well as those in “dozens” of other countries.


Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds. Make sure to click the Follow button!

And of course you can also follow TechRadar on TikTok for news, reviews, unboxings in video form, and get regular updates from us on WhatsApp too.

Sign up to read this article
Read news from 100’s of titles, curated specifically for you.
Already a member? Sign in here
Related Stories
Top stories on inkl right now
One subscription that gives you access to news from hundreds of sites
Already a member? Sign in here
Our Picks
Fourteen days free
Download the app
One app. One membership.
100+ trusted global sources.