China-Linked Hackers Target UK Prime Ministers’ Aides for Years

Chinese state-linked hackers, identified as Salt Typhoon, have allegedly spent years accessing the phones of senior aides to UK prime ministers, including Boris Johnson, Liz Truss, and Rishi Sunak. The reported activity dates back to 2021, with intelligence sources indicating that the breach reached the core of Downing Street. While it remains unclear if the prime ministers’ personal devices were compromised, the hackers are believed to have gained extensive access to communications metadata.

The espionage was uncovered in 2024, following disclosures from US officials about Chinese-linked hacking groups infiltrating telecommunications providers globally. Salt Typhoon is known for its ability to extract metadata without installing software on devices, allowing them to gather call logs and location data, which can reveal significant information about communications patterns.

Reports suggest that the breaches involved multiple attacks on Downing Street staff phones, particularly during Sunak’s tenure. MI5 had previously issued an espionage alert regarding Chinese state spying, but the full extent of the telecom compromise has not been publicly detailed.

This incident raises serious concerns about the security of government communications, especially as the UK prepares for a diplomatic visit to China. Critics argue that the government has been too lenient towards Beijing, particularly in light of plans for a new Chinese embassy near sensitive communications infrastructure.

US officials have characterized the Salt Typhoon operation as one of the most successful espionage campaigns, emphasizing the difficulty of detecting such intrusions once attackers are embedded in network infrastructure. The implications of these breaches extend beyond immediate security concerns, potentially affecting international relations and trade discussions.

Implications for Security and Privacy

The infiltration of UK government communications by state-backed actors underscores the need for heightened vigilance regarding cybersecurity practices. Organizations and individuals should be aware of the risks posed by sophisticated hacking groups and the importance of securing telecommunications networks.

Users should consider reviewing their communication practices, especially when discussing sensitive information. Monitoring for unusual activity on devices and ensuring that security measures are in place can help mitigate potential risks associated with such breaches.