In a significant revelation, a ninth U.S. telecommunications company has been identified as a target of the Chinese espionage campaign known as “Salt Typhoon,” according to Anne Neuberger, the deputy national security adviser for cyber and emerging technology. This disclosure comes as the United States gears up for a policy-driven response to the sweeping cyber intrusions.
Neuberger’s comments on Friday expanded the previously known list of eight affected telecom firms, highlighting the extensive reach of the espionage effort. The additional breach was uncovered after the federal government provided telecom companies with detailed guidance on identifying and mitigating the sophisticated techniques employed by the Chinese actors.
“From that, yes, a ninth company was identified,” Neuberger confirmed during a press briefing. While the White House has not disclosed the identity of the latest victim, the broader campaign has alarmed both political leaders and cybersecurity experts.
Scope of the Breach
The Salt Typhoon campaign targeted unclassified communications from the phones of high-ranking U.S. government officials, including President-elect Donald Trump and Vice President-elect JD Vance. Additionally, the hackers accessed metadata belonging to an as-yet-unknown number of American citizens. Despite repeated denials from Beijing, the breach has raised serious concerns about China’s cyber capabilities and intentions.
The intrusion has provoked bipartisan outrage on Capitol Hill. Incoming Trump administration officials, including Rep. Mike Waltz (R-FL), who has been selected as the next national security adviser, have pledged a strong response. “We need to start going on offense,” Waltz stated during an interview with Fox News.
Policy Responses Underway
Neuberger outlined several initiatives the U.S. government is pursuing to combat the breach and strengthen cybersecurity defenses across critical industries:
FCC Cybersecurity Mandate: The Federal Communications Commission (FCC) will vote next month on a proposed rule requiring telecom providers to annually document their cybersecurity practices or face significant fines. Neuberger emphasized that network segmentation will be a key recommendation to limit the spread of intrusions.“In one case, a single administrator account had access to over 100,000 routers,” she noted. “When the Chinese compromised the account, they gained broad access across the entire network.”This level of vulnerability underscores the urgency of implementing stricter cybersecurity protocols industry-wide.
Government Procurement Standards: The General Services Administration (GSA) is reviewing federal contracts to ensure they mandate high-impact cybersecurity measures from vendors. Leveraging the federal government’s purchasing power could compel private firms to adopt more robust defenses.
Commerce Department Actions: The Commerce Department is advancing a ban on China Telecom, one of the largest Chinese telecommunications companies operating in the U.S. While a final decision will await President-elect Trump’s inauguration, additional measures targeting similar entities are expected in the coming months.
Enhanced Threat Detection and Logging: Neuberger cautioned that many companies lack adequate logs, making it difficult to fully assess the scope of the breach. She urged businesses to adopt advanced monitoring solutions to detect and prevent future intrusions.
Challenges and Implications
Neuberger acknowledged the challenges posed by the Salt Typhoon campaign, particularly the hackers’ efforts to erase their tracks. She warned that the full extent of the intrusion might never be known, further complicating recovery and response efforts.
While the FCC’s five commissioners are often divided along party lines, Neuberger urged them to unite on this issue: “Once companies are taking the necessary steps to make their networks defensible, we can be more confident in saying that Chinese actors have been evicted and cannot reenter.”
Bipartisan Alarm
The incident has galvanized lawmakers from both parties. Many view this breach as a wake-up call to strengthen national cyber defenses and reconsider the role of Chinese companies in critical infrastructure.
Next Steps
The incoming Trump administration has signaled an aggressive stance on cybersecurity. Beyond retaliatory measures, officials are expected to prioritize domestic reforms to harden the U.S. against future attacks. Waltz’s comments reflect this resolve: “We can no longer remain passive. It’s time to take decisive action.”
With additional measures likely to emerge in the coming months, the Salt Typhoon campaign’s exposure could mark a turning point in U.S.-China cyber relations, setting the stage for more stringent cybersecurity policies and international tensions.

