On 10 February 2020, the U.S. Department of Justice unsealed an indictment in the Northern District of Georgia naming four members of the Chinese People's Liberation Army (PLA) 54th Research Institute as the operators of the 2017 Equifax data breach (147 million records).
The four named officers
- Wu Zhiyong (吴志勇)
- Wang Qian (王乾)
- Xu Ke (许可)
- Liu Lei (刘磊)
All four were identified as PLA officers, with rank and unit affiliation specified in the indictment. The DOJ assessed that the operation was a state-sponsored intelligence collection effort rather than financially motivated cybercrime — the stolen Social Security numbers, credit histories, and biographical data were assessed as inputs for counter-intelligence targeting of U.S. persons holding security clearances.
Charges
The indictment listed nine counts including conspiracy to commit computer fraud, economic espionage, and wire fraud. Maximum statutory penalties totalled over a hundred years per defendant.
None of the four officers were extradited; China does not have an extradition treaty with the United States and has consistently denied state involvement in the breach.
Significance
This indictment is one of the most-detailed public attributions of a state cyber operation to specific named officers. The DOJ released photographs, military ranks, and unit affiliations — material typically held back in intelligence collection. The same Unit 54 has been linked to subsequent operations against the U.S. Office of Personnel Management (2015), Anthem health insurer (2015), and the Marriott / Starwood hotel chain (2014–2018).
The Equifax indictment closed the loop on the "big four" Chinese intelligence collection campaigns against U.S. personal-records-rich data sources, all of which the U.S. intelligence community publicly attributes to PLA / MSS units.