Chinese state media: police in Harbin accuse the NSA of launching “advanced” cyberattacks during the Asian Winter Games in February 2025 and name three agents
Chinese police in the northeastern city of Harbin have accused the United States National Security Agency (NSA) …
Context & Ripple Effects
This accusation lands amid reciprocal public espionage claims: the U.S. had recently charged Chinese nationals over an alleged campaign against government and other organizations, while U.S. agencies had previously detailed China-backed exploitation of known vulnerabilities in a joint advisory on network-intrusion activity.
It also establishes an earlier point in a continuing Chinese narrative about alleged NSA activity, later extended to claims involving a national time-service provider in China's allegations over its time-service center. The significance is less the unverified technical claim than the decision to attach it to a high-profile international event and identify individuals.
First-order effects
- Chinese authorities have turned an asserted cyber incident into a public, person-specific allegation against the NSA, increasing the immediate diplomatic and reputational stakes for the named agency and alleged personnel.
- Absent disclosed evidence in the supplied report, the claim does not independently settle technical attribution; it chiefly changes the public record and the messaging environment around the incident.
Second-order effects
- The naming of alleged agents can invite competing official narratives and make cyber-incident discussions harder to separate from broader U.S.-China espionage disputes, including U.S. charges alleging PRC-linked espionage.
- Organizations responsible for major events may face greater pressure to treat cyber defense, incident attribution, and public communications as linked operational risks rather than separate functions.
Third-order effects
- If both governments continue pairing cyber accusations with named individuals and strategic institutions, public attribution may become a more routine instrument of state competition alongside covert collection and legal action.
- That pattern could further reduce the space for mutually accepted technical findings after major incidents, with each side's domestic and diplomatic narrative carrying more weight than shared attribution standards.
The trend: This is one data point in the normalization of public cyber attribution as a tool of strategic rivalry between major states.