Chinese Hackers Targeted UK Downing Street Officials' Phones for Years

Allegations of Extensive Cyber Espionage Emerge

Reports indicate that Chinese state-sponsored hackers targeted the mobile phones of senior officials within Downing Street for several years, potentially compromising sensitive communications. The alleged cyber espionage campaign is believed to have spanned from 2021 to 2024, affecting aides to former Prime Ministers Boris Johnson, Liz Truss, and Rishi Sunak. While it remains unconfirmed whether the Prime Ministers' personal devices were directly breached, intelligence sources suggest the intrusion reached 'right into the heart of Downing Street'.

'Salt Typhoon' Identified as Likely Culprit

The Chinese-linked hacking group known as Salt Typhoon has been identified by US intelligence sources as the likely perpetrator behind this extensive operation. This group is recognized for its method of infiltrating telecommunications providers to extract metadata and communications. The capabilities of the hackers reportedly included the ability to read text messages, listen to calls, and access crucial phone metadata such as call logs and location data. Former US Deputy National Security Adviser Anne Neuberger confirmed that the hackers possessed the technical capacity to 'record phone calls at will'.

Discovery and Broader Implications

The breaches in the United Kingdom were reportedly uncovered in 2024, following revelations from US officials about a widespread penetration of telecommunications companies globally by Chinese-linked hacking groups. This operation is considered part of a larger espionage effort by Beijing, which has also targeted other members of the 'Five Eyes' intelligence alliance, including the United States, Australia, Canada, and New Zealand.

Official Responses and Ongoing Concerns

In response to the broader threat of Chinese espionage, MI5 issued an alert to Parliament in November 2025. However, the UK government has generally adopted a more cautious approach than the US in publicly detailing the extent of such attacks, often referring to them as 'clusters of activity'. A spokesperson for the Chinese embassy has denied the allegations, asserting that China is a 'staunch defender of cyber security' and opposes 'politicising cybersecurity issues or accusing other countries without evidence'. Despite these denials, US intelligence sources suggest that the Salt Typhoon operation may still be active, raising concerns about potential ongoing exposure for current officials, including Prime Minister Keir Starmer and his staff.