Chinese hackers gained access to Belgian state security emails
Chinese hackers managed to access Belgian state security emails for almost two years, Le Soir reported on Wednesday. The Belgian Justice minister confirmed on Thursday that a complaint had been filed against the hackers.
According to Le Soir, the hackers managed to intercept one out of every 10 emails sent to or from the intelligence service between 2021 and 2023. The breach is said to be the most serious security incident in the service's history.
The hackers gained access to the emails by exploiting a flaw in the security software of US company Barracuda. A previously reported attack on Barracuda's software is believed to have been carried out by the UNC4841 collective, which is said to be spying on behalf of China.
'All emails affected'
The Belgian state security service did not comment on the details of the case, but told Le Soir that a criminal complaint had been filed. On Thursday, Justice minister Annelies Verlinden confirmed in parliament that a complaint had been lodged with the federal prosecutor's office against the hackers.
Verlinden confirmed that the hackers were part of a group "linked to the People's Republic of China"
The breach concerns emails sent or received between 4 February 2021 and 31 May 2023, and the problem has since been resolved, Verlinden told the Chamber of Representatives.
"The state security service assumes that all emails from this period were affected," she said. Verlinden also confirmed that the hackers were part of a group "linked to the People's Republic of China".
Up to half of employees' personal data, including identity documents, may have been stolen
No classified information was reportedly involved in the hack, but other sensitive information may have been compromised, Le Soir reported. Up to half of employees' personal data, including identity documents, may have been stolen.
'Irresponsible criticism'
The Chinese embassy in Brussels denounced "irresponsible criticism of China" and "false information about so-called Chinese hackers and the alleged threat from China" on Thursday.
"We do not support, let alone tolerate, hacking attacks"
"China resolutely opposes cyberattacks in all their forms and fights against them in accordance with the law," an embassy spokesperson said.
"We do not support, let alone tolerate, hacking attacks. China and Belgium both face threats related to cybersecurity and false information. Both are victims, not perpetrators, and clearly need to strengthen communication in order to respond together."
© SCIENCE PHOTO LIBRARY RF
Related news
