Cyber Incident Victim: Contractors working for the US Navy
Date:
Jan 2015
Location:
United States of America
Summary
Chinese government hackers compromised a US Navy contractor, stealing highly sensitive data on submarine warfare including secret plans for a supersonic anti-ship missile under development. The breach targeted a contractor supporting the Naval Undersea Warfare Center, which conducts submarine and underwater weapon research, resulting in the exfiltration of significant undersea combat capabilities information.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
In January and February 2018, Chinese government hackers breached the computer systems of a United States Navy contractor working for the Naval Undersea Warfare Center (NUWC) in Newport, Rhode Island. The attackers exfiltrated substantial quantities of highly sensitive data concerning American undersea warfare capabilities, including technical details and development plans for advanced submarine technologies. Among the compromised materials were classified specifications related to a supersonic anti-ship missile project slated for deployment on U.S. submarines by 2020. The targeted contractor supported NUWC's research and development programs for submarines and underwater weapon systems, granting the hackers access to military secrets critical to maintaining undersea dominance. Officials familiar with the intrusion confirmed the theft occurred over this two-month period but did not disclose the contractor's identity or the exact infiltration methods. The stolen data encompassed information on submarine stealth capabilities, weapon system integration, and propulsion technologies. Security investigators assessed the breach as part of a broader Chinese effort to accelerate its naval modernization by acquiring advanced U.S. military research.
U.S. intelligence agencies detected the compromise during an ongoing investigation, though the timeline for discovery relative to the exfiltration dates remains unspecified in public records. The stolen submarine warfare data represented one of the most significant losses of naval combat advantage in years, potentially undermining planned capabilities against near-peer adversaries. Officials speaking anonymously emphasized the sensitivity of the compromised missile project, which aimed to provide submarines with unprecedented anti-ship strike capacity. No operational submarine systems were directly breached, as the intrusion focused solely on the contractor's developmental and research data. The Naval Criminal Investigative Service (NCIS) coordinated with other defense and intelligence entities to assess the full scope of losses, but no public disclosures detailed containment measures or system remediations. The incident exposed vulnerabilities in the defense industrial base's cybersecurity protocols, particularly among contractors handling sea-based nuclear deterrence and offensive strike systems. Long-term strategic impacts included potential erosion of the U.S. Navy's qualitative edge in undersea warfare, as adversaries gained insight into next-generation submarine technologies and countermeasure development timelines.