Security News > 2021 > July > US and allies finger China in Microsoft Exchange hack

The US has also blamed hackers working with China for ransomware attacks, extortion, crypto-jacking and other cybercrimes.
The United States and several allies have officially pointed the finger at China for the recent hack of Microsoft Exchange server as well as an ongoing series of cyberattacks carried out by contract hackers for personal profit.
To start, the U.S. laid the blame on China's doorstep for the recent hack of Microsoft Exchange server.
At the time, Microsoft and others attributed the Exchange server hack to a China-based group named Hafnium, which Microsoft said conducts its operations mostly from leased virtual private servers in the U.S. But this marks the first time the U.S. government has officially called out China as responsible for these attacks.
The impact of the charges against China ring even stronger as they're coming not just from the U.S. Marking the first time it has criticized the PRC's cybercriminal activity, NATO issued a statement on Monday joining the U.S. and others in attributing responsibility for the Exchange server compromise to the People's Republic of China.
In its own statement, the U.K. agreed that China was responsible for the Exchange hack, adding that it also has blamed China's MSS as behind such cyberthreat groups as AP31 and APT40.
News URL
Related news
- China-Linked Cyber Threat Group Hacks US Treasury Department (source)
- CISA says recent government hack limited to US Treasury (source)
- US Treasury hack linked to Silk Typhoon Chinese state hackers (source)
- China's Salt Typhoon spies spotted on US govt networks before telcos, CISA boss says (source)
- US sanctions Chinese firm, hacker behind telecom and Treasury hacks (source)
- Hackers game out infowar against China with the US Navy (source)
- Microsoft: Exchange 2016 and 2019 reach end of support in October (source)
- Microsoft: Outdated Exchange servers fail to auto-mitigate security bugs (source)
- A PostgreSQL zero-day was also exploited in US Treasury hack (CVE-2025-1094) (source)
- Microsoft's End of Support for Exchange 2016 and 2019: What IT Teams Must Do Now (source)