A federal grand jury has returned an indictment charging four members of the Chinese People’s Liberation Army (PLA) with hacking into the computer systems of the credit reporting agency Equifax and stealing Americans’ personal data and Equifax’s valuable trade secrets.

The nine-count indictment alleges that Wu Zhiyong, Wang Qian, Xu Ke and Liu Lei were members of the PLA’s 54th Research Institute, a component of the Chinese military. They allegedly conspired with each other to hack into Equifax’s computer networks, maintain unauthorized access to those computers, and steal sensitive, personally identifiable information of approximately 145 million American victims.

ajc.com
icon to expand image

The 2017 breach affected roughly 145 million people, with the hackers successfully stealing names, Social Security numbers and other personal information stored in the company's databases.

Equifax to Pay up to $700 Million for Data Breach The breach occurred in 2017, affecting close to 150 million people. Exposed consumer data included SSNs, birthdates, addresses and even driver’s license numbers. $425 million will be paid out to those affected by the breach, with $125 million being paid out to states and $100 million paid out to the Consumer Financial Protection Bureau. Equifax will also begin offering six free credits reports a year for seven years beginning in January. “Equifax failed to

The four are also accused of stealing the company's trade secrets, law enforcement officials said.

»MORE: Equifax to pay at least $600M to settle data breach

“This was a deliberate and sweeping intrusion into the private information of the American people,” said Attorney General William Barr, who made the announcement. “Today, we hold PLA hackers accountable for their criminal actions, and we remind the Chinese government that we have the capability to remove the Internet’s cloak of anonymity and find the hackers that nation repeatedly deploys against us.”

Jun Ying, his mother and his wife pleaded tearfully in court asking U.S. District Judge Amy Totenberg to sentence Ying to probation or home confinement.

The criminal charges were filed in federal court in Atlanta, where the company is based.

“The indictment exposes the Chinese military’s effort to collect sensitive information of Americans on an unprecedented scale and steal proprietary information for the benefit of the Chinese government,” said U.S. Attorney Byung “BJay” Pak of the Northern District of Georgia. “With this announcement, we underscore our resolve to protect our citizens from state-sponsored cyber threats and to unmask those who perpetrate unlawful attacks.

»MORE: Equifax reaches $700 million settlement over data breach

“These charges were made possible because Equifax worked closely, and early, with our dedicated law enforcement team to hold the perpetrators accountable. As corporations like Equifax continue to be targeted by cyber attacks, this investigation illustrates the critical importance of public-private collaboration to combat the most sophisticated cyber threats.”

Only 27-percent of agencies can detect if they are victims of major breach.

The case is one of several the Justice Department has brought over the years against members of the PLA. The Obama administration in 2014 charged five Chinese military hackers with breaking into the networks of major American corporations to siphon trade secrets.

The indictment, which details efforts the hackers took to cover their tracks, includes charges of conspiracy to commit computer fraud, conspiracy to commit economic espionage and conspiracy to commit wire fraud.