FBI Declares Surveillance System Breach a Major Incident

Wiretap System Compromised

The FBI classified a February breach of its surveillance infrastructure as a major incident under federal law in early April 2026. The compromised system manages court-authorized wiretaps and stores pen register and trap-and-trace data—metadata showing who is communicating with whom.

Federal officials notified Congress that phone numbers of surveillance targets had been exposed. The breach began February 17 when the FBI detected abnormal activity in the unclassified system, but the full scope and damage assessment took weeks to determine.

China-Linked Intrusion

Investigators suspect Chinese government-affiliated hackers, possibly the Salt Typhoon group that previously breached major U.S. telecom providers in 2024. The attackers used sophisticated techniques, exploiting a commercial internet service provider's infrastructure to bypass FBI network security controls.

The designation as a major incident means the breach likely caused demonstrable harm to national security. Exposed phone metadata could allow adversaries to map FBI investigations, identify intelligence targets, and determine which individuals or networks are under surveillance.

Ongoing Investigation

The FBI launched both forensic examinations and a criminal probe into the intrusion. The Justice Department established a working group to strengthen cyber resilience and improve incident response processes across the agency.

The breach extends a pattern of Chinese-linked intrusions targeting U.S. law enforcement and communications infrastructure. It underscores the challenge of securing sensitive government systems against nation-state actors with significant resources and patience.