FBI official says Chinese hackers risk arrest abroad after extradition of Xu Zewei
The Facts
- FBI Assistant Director Brett Leatherman said on April 30 that Chinese hackers can be arrested when they travel outside China.
- Leatherman's comments came shortly after the extradition of Chinese national Xu Zewei, 34, from Italy to the United States.
- Xu was arrested in Milan in July 2025, and an Italian court approved his extradition to the United States.
- U.S. authorities allege Xu participated in hacking campaigns in 2020 and 2021 while working for a Chinese contractor and acting at the direction of the Chinese government.
- According to U.S. authorities, the alleged intrusions included targets at U.S.-based universities and researchers working on COVID-19 vaccines, treatment, and testing.
- Multiple reports say the allegations against Xu are tied in part to the HAFNIUM intrusion campaign, which compromised thousands of computers worldwide, including many targets in the United States.
- The case matters beyond Xu because U.S. officials are presenting the extradition as a signal that suspected state-linked cyber actors may face legal consequences if they travel internationally.
- China has disputed the case, with Chinese officials or embassy representatives saying the U.S. allegations were fabricated or politically motivated.
Context
Who is Xu Zewei?
Xu Zewei is a 34-year-old Chinese national who was extradited from Italy to the United States after his July 2025 arrest in Milan. U.S. authorities accuse him of taking part in hacking operations in 2020 and 2021 while working for a Chinese contractor Reuters,CNA,AsiaOne.
What hacking activity is Xu accused of?
U.S. authorities say Xu and others targeted U.S.-based universities, immunologists, and virologists involved in COVID-19 vaccine, treatment, and testing research. Reports also link the case to the HAFNIUM campaign, which compromised thousands of computers worldwide, including many in the United States ThePrint,Times of India,民視新聞網.
What remains disputed?
The central dispute is over the legitimacy of the U.S. case and the alleged role of the Chinese government. Chinese officials and embassy representatives have said the charges were fabricated or politically motivated, while U.S. officials say the extradition shows suspected state-linked hackers can face prosecution outside China ThePrint,ThePrint,DataBreachToday.
How left and right read it
What stands out here is the scale of harm alleged: U.S. authorities say the intrusions targeted U.S.-based universities and researchers working on COVID-19 vaccines, treatment, and testing, and were tied in part to a campaign that compromised thousands of computers worldwide. In that light, using extradition to impose legal consequences on suspected state-linked cyber actors reads as an effort to protect public-facing research and institutions from cross-border attacks.
What matters most is the assertion that suspected state-linked hackers are not beyond the reach of the law if they leave China. An arrest in Milan, an Italian court’s approval of extradition, and the transfer to the United States underscore a rules-based response through legal process, even as China disputes the allegations as fabricated or politically motivated.
The receipts — all 21 sources
Wire services (2)
Independent coverage (19)
Facts first. Then every angle.
The day’s biggest stories in one short brief — the facts everyone agrees on, then the competing values behind the headlines. Free in your inbox.