CrowdStrike report details a multi-year China-linked hacking campaign against Western companies like GE that supplied components for China's Comac C919 airplane
the longer we allow them to rip us off (just so a few billionaire bankers and corporate executives can expand into “China's growing middle class") the greater the likelihood we lose this economic war with our biggest threat yet. @realDonaldTrump sold us out. Sad! https://twitter.com/...
Context & Ripple Effects
CrowdStrike's 2019 report on the Comac C919 supply chain is an early data point in a pattern the firm has documented ever since: China-linked crews compromising Western companies to feed domestic industrial programs. The same reporting line later detailed LightBasin's compromises of 13 telecom companies since 2019, and researchers separately traced theft of source code and chip designs from Taiwanese chipmakers over a comparable window.
The C919 angle matters because the targets — GE and other component suppliers — were not random victims but the exact firms whose know-how China's state aircraft program needed. CrowdStrike's later tallies, including Chinese hacking attacks on US targets more than doubling to 330+ incidents in 2025, suggest this supplier-focused espionage scaled rather than abated.
First-order effects
- Western suppliers like GE now face a documented record that their aerospace designs were exfiltrated to benefit Comac, forcing them to weigh continued component sales to China against the certainty of IP loss.
- CrowdStrike's report hands US policymakers a concrete case linking commercial engagement with China's aviation buildout to state-sponsored theft, sharpening scrutiny of aerospace export and licensing decisions.
Second-order effects
- Suppliers across other strategic sectors — telecoms, semiconductors — face the same calculus the C919 targets did, pushing vendors toward segmenting networks and restricting what engineering detail travels with exported components.
- The report pressures the political debate over China market access, with critics arguing the cost of supplying China's industrial programs lands on the firms doing the supplying.
Third-order effects
- If the pattern holds — supplier espionage feeding domestic substitution in aviation, chips, and telecom — Western industrial firms structurally reprice China engagement, treating IP leakage as a cost of market entry rather than an anomaly.
- CrowdStrike's annual China tallies harden into the de facto barometer of this economic-espionage campaign, giving regulators and boards a shared metric for escalating supply-chain decoupling decisions.
The trend: State-sponsored Chinese hacking is evolving from opportunistic espionage into a sustained industrial-acquisition strategy, targeting Western suppliers whose IP accelerates domestic programs like the C919.