Exclusive: China hacked Downing Street phones for years

Key Concepts

• State-Sponsored Hacking: Cyberattacks conducted by or with the support of a nation-state.
• Salt Typhoon: The name given to a Chinese espionage operation focused on cyber intrusions.
• Metadata: Data about data; in this case, information about phone calls and messages (who, when, where) rather than the content itself.
• Hostile Activity: Actions by a foreign power considered detrimental to national security.
• Cybersecurity: Practices and technologies designed to protect computer systems and networks from theft, damage, or unauthorized access.

Targeted Hacking of UK Government Officials

The Telegraph has revealed a significant cybersecurity breach involving state-sponsored hackers believed to be operating from China. These hackers targeted the mobile phones of aides close to three recent British Prime Ministers: Boris Johnson, Liz Truss, and Rishi Sunak, while they were in office. The breaches are believed to have begun as early as 2021, but were only detected by UK intelligence agencies in 2024.

The operation, identified by US intelligence sources as “Salt Typhoon,” is reportedly still active, raising concerns that current Prime Minister Rishi Sunak’s communications may also be compromised as he prepares for a visit to China – the first by a British Prime Minister since 2018 – aimed at bolstering trade and investment.

Potential Scope of Compromise

The potential impact of the hacking extends beyond direct access to the content of communications. While the report doesn’t confirm whether hackers were able to directly eavesdrop on calls, it highlights the significant risk of accessing metadata. This metadata could reveal crucial information about the contacts of senior government officials, their locations, and communication patterns. This information, even without the content of messages, provides valuable intelligence for espionage purposes.

The hacking wasn’t limited to government officials. The operation also resulted in China gaining access to the phone data of “millions of ordinary people,” though the specifics of this broader access remain unclear.

Political Implications and Criticism

The revelations have sparked criticism of the Labour Party’s approach to China. Critics argue that Labour is taking a “soft approach” towards hostile Chinese activity, citing the recent approval of plans for a large Chinese embassy in London. The embassy’s location, situated close to sensitive communication cables, is viewed as a potential security risk. This decision is seen as potentially “jeopardizing national security.”

Government Response and Chinese Denial

When contacted by The Telegraph, the UK government declined to comment on the allegations. The Chinese embassy in London issued a statement rejecting the accusations, stating, “We firmly oppose the practice of politicizing cyber security issues or accusing other countries without evidence.” This denial aligns with China’s typical response to allegations of state-sponsored hacking.

Logical Connections & Data

The timeline presented demonstrates a delay between the initial breaches (2021) and their discovery (2024), highlighting potential weaknesses in the UK’s cybersecurity detection capabilities. The report establishes a direct link between the upcoming Prime Ministerial visit to China and the heightened concern regarding ongoing espionage efforts. The mention of US intelligence sources corroborating the “Salt Typhoon” operation adds weight to the claims. The statistic of “millions of ordinary people” affected underscores the scale of the potential data breach.

Synthesis

The report reveals a serious national security concern regarding ongoing Chinese cyber espionage targeting the UK government and its citizens. The potential compromise of communications and metadata of high-ranking officials, coupled with the broader data breach affecting millions, presents a significant risk. The timing of these revelations, coinciding with a planned trade visit to China, raises questions about the UK’s approach to balancing economic interests with national security concerns. The incident underscores the need for robust cybersecurity measures and a critical assessment of foreign investment and infrastructure projects with potential security implications.