Full Breakdown
Italy Extradites Chinese Cyber-Espionage Suspect Xu Zewei to United States
4/28/2026, 12:45:59 PM
Italy Extradites Xu Zewei to the United States
Italian police transferred Chinese national Xu Zewei to U.S. authorities on 27 April 2026 after his July 2025 arrest in Milan and a court ruling allowing extradition. He faces a nine-count indictment for wire fraud, aggravated identity theft and unauthorized computer access.
State-Backed Hacking Operation and Actors
U.S. prosecutors say Xu acted for China’s Ministry of State Security, using Shanghai-based contractor Shanghai Powerock Network and the Hafnium group. They exploited Microsoft Exchange flaws in 2020-2021 to steal COVID-19 vaccine, treatment and testing research from U.S. universities.
Timeline of Key Events
- 2020: Hafnium exploits Exchange.
- 2021: ~13,000 U.S. entities breached.
- 3 Jul 2025: Xu arrested.
- Apr 2026: Italian court approves extradition.
- 27 Apr 2026: Handover completed.
Scope of the Intrusion
Prosecutors cite ~13,000 U.S. organizations breached; the FBI notes ~12,700. Xu faces nine counts, each carrying up to 20 years.
Official Statements & Responses
Court filings allege Xu hacked U.S. universities and researchers on COVID-19 vaccine, treatment, testing. Acting U.S. Attorney John Marck said the case strikes “at the heart of American science and security.” Assistant Attorney General John A. Eisenberg affirmed U.S. commitment to pursue hackers threatening cybersecurity. FBI assistant director Brett Leatherman called the extradition proof of the FBI’s global reach. Italian police labeled Xu a dangerous foreign hacker; China’s foreign ministry called the charges fabricated political manipulation.
Criticism & Opposition
China’s foreign ministry accused the United States of “fabricating charges through political manipulation,” urging Italy to “respect facts and law, immediately correct its mistake.” Xu’s Italian lawyer Enrico Giarda claimed mistaken identity and said his client received no prior notice.
Why It Matters
The case underscores U.S.–China cyber rivalry, sets a rare precedent for extraditing a state-backed hacker, and highlights vulnerabilities in pandemic research and reliance on private contractors for foreign intelligence.
Conflicting Reports & Gaps
Sources report 13,000 versus 12,700 U.S. organizations compromised. The “enabling” firm is named Shanghai Powerock Network in one account but not in others. The Chinese Embassy in Washington has not commented.
Verbatim Quotes
- “Today, Xu Zewei will stand in a federal courtroom to answer for crimes that struck at the heart of American science and security.” — John Marck, Acting U.S. Attorney, Southern District of Texas
- “The United States is committed to pursuing hackers who steal information from US businesses and universities and threaten our cybersecurity,” — John A. Eisenberg, Assistant Attorney General for National Security
- “The extradition of Xu Zewei demonstrates the FBI’s reach extends well beyond U.S. borders,” — Brett Leatherman, FBI Cyber Division Assistant Director
What’s Next
Xu will appear for a pre-trial hearing in Houston later this month, with a trial date to be set. Conviction on all counts could result in decades of imprisonment. U.S. officials say investigations into other alleged Hafnium operatives continue.
