In a significant escalation of cyber tensions, Chinese authorities have accused three individuals, identified as Katheryn A. Wilson, Robert J. Snelling, and Stephen W. Johnson, of orchestrating cyberattacks during the Asian Winter Games held in Harbin in February 2025. These individuals are alleged to be operatives of the U.S. National Security Agency (NSA).
The cyberattacks reportedly targeted the event’s management systems, including registration, competition entry, and travel logistics, all of which contained sensitive personal data of participants and officials. The assaults aimed to disrupt the Games and compromise their normal operations. Additionally, critical infrastructure in Heilongjiang province, encompassing sectors such as energy, transportation, water resources, telecommunications, and defense research institutions, were also targeted. Chinese technology giant Huawei was among the entities affected.
According to reports, the NSA operatives transmitted encrypted data packets to devices running Microsoft Windows operating systems within the province. These actions caused significant harm to China’s critical infrastructure, national defense, financial systems, societal functions, production capabilities, and the personal information security of Chinese citizens. The Chinese Foreign Ministry condemned these activities as extremely malicious and demanded that the U.S. cease such actions immediately.
This incident is the latest in a series of cyber-related accusations between the two nations. Previously, China accused the U.S. of launching tens of thousands of cyberattacks on Chinese networks, including infiltrations into the Northwestern Polytechnical University in Xi’an, which specializes in aeronautical and space research. The U.S., on the other hand, has charged Chinese nationals in separate cyberattack cases and labeled China as the most persistent cyber threat to its interests.
The ongoing cyber conflict underscores the fragile state of U.S.-China relations, with both nations accusing each other of cyber espionage and attacks on critical infrastructure. As these allegations continue to surface, the international community remains watchful of the potential implications for global cybersecurity and diplomatic relations.
