According to a statement from the State Department, Integrity Tech is a significant contractor for the Chinese government, linked to the Ministry of State Security. The hackers associated with the company are said to operate under the guidance of Beijing, focusing on attacks against critical infrastructure both in the U.S. and internationally.
Western officials have previously pointed fingers at the Beijing-based firm for its connection to Flax Typhoon. In September, FBI Director Christopher Wray claimed that the company had "gathered intelligence and conducted reconnaissance for Chinese government security agencies."
Simultaneously, an advisory issued by cyber officials from the U.S., U.K., Canada, Australia, and New Zealand accused Integrity of compromising over 250,000 devices globally.
Chinese representatives have countered these claims, asserting that the U.S. and its allies have "leapt to unfounded conclusions and made baseless allegations against China" regarding Integrity and Flax Typhoon.
This hacking group is part of a broader array of Chinese cyberespionage entities that have come under increased scrutiny for their targeting of sensitive information and critical infrastructure. Other groups, such as "Volt Typhoon," are viewed with concern by American officials, who believe they may be preparing for potential conflict with the U.S., while "Salt Typhoon" has infiltrated U.S. telecommunications firms.
Last week, U.S. Treasury officials reported that an unidentified Chinese hacking group had breached the Department's systems, compromising an undisclosed volume of data, specifically targeting the Treasury's sanctions office, as later reported by the Washington Post.