RH DOSSIER / Cyber network / contractor
i-Soon / Anxun
- Purpose
- A Chinese commercial hacking contractor. DOJ alleges it stole information from governments, religious organizations and critics of Beijing, then sold access or data to state customers. [19]
- Size and reach
- Current workforce unknown. The 2025 case alleges sales or attempted sales to at least 43 MPS/MSS bureaus during the charged period, illustrating customer reach rather than employee numbers. [19]
- Why this alignment
- DOJ describes profit-driven work for intelligence and police agencies, including both commissioned and speculative intrusions. Commercial incentives and state demand are explicit in the allegations. [19]
01 / STATE RELATIONSHIP
Ministry of Public Security / Ministry of State Security
DOJ alleges i-Soon conducted intrusions for MPS and MSS, as well as speculative hacking to sell information to customers.
02 / CONTEXT IN THE RECORD
What to know
DOJ announced charges against eight i-Soon employees and two MPS officers, with activity alleged from roughly 2016 through 2023.
Where the evidence stops
The charges are allegations and defendants are presumed innocent. The case describes a contractor ecosystem, not an armed proxy or a claim that every intrusion was ordered.
The cited dates establish the scope of this record. They do not confirm current operational capacity, complete membership or a present-day legal designation.
PUBLIC RECORD
Sources
- Charges against Chinese contract hackers and officials ↗
U.S. Department of Justice · 2025-03-05