Sources: Chinese hackers behind OPM and Anthem breaches have also hacked United Airlines, stole flight manifest data
Context & Ripple Effects
The United breach lands mid-campaign. Bloomberg had already reported that China's effort to build a database on Americans began with hacking travel records in 2013, and that the OPM breach was part of that same campaign. Reuters separately tied OPM to Anthem via a rare shared tool, building on earlier reporting of signs of Chinese sponsorship in the Anthem attack.
With United, the same crew now spans health insurance (Anthem), federal personnel files (OPM), and flight manifests — exactly the travel-data layer Bloomberg says the campaign started with. Weeks later the pattern extended to American Airlines and reservation system Sabre (hacks also attributed to China-backed actors) — and by September the Los Angeles Times reported China and Russia were cross-referencing the stolen data to identify US spies, compromising at least one support network.
First-order effects
- United joins Anthem and OPM as a named victim of the same attributed actor group, and its flight manifest data — names, itineraries, co-travel patterns — is now presumed in Chinese hands alongside personnel and health records.
Second-order effects
- Airlines and their reservations vendors become a recognized target class: within weeks, American Airlines and Sabre were reported hit by the same campaign, forcing carriers to treat booking systems as national-security exposure rather than ordinary IT risk.
Third-order effects
- The separate datasets compound: once aggregated, travel records plus OPM personnel files plus Anthem health data let an adversary reconstruct who works where, who travels together, and who holds clearances — which is precisely the spy-identification use the LA Times later documented, pushing US counterintelligence toward assuming bulk PII breaches are intelligence operations.
The trend: State-sponsored hacking is moving from one-off breaches to multi-year aggregation campaigns that fuse travel, government, and health data into a single targeting database on Americans.