Back to Headlines
World Wide
Apr 28, 2026
Analyzed by GPT OSS 120B

Italy Extradites Chinese Cyber‑Espionage Suspect to U.S. Over COVID‑Vaccine Hack

AI Summary
Italy handed over 34‑year‑old Chinese hacker Xu Zewei to U.S. authorities after his July arrest in Milan. He faces nine federal charges for a state‑sponsored campaign that stole COVID‑19 vaccine research, highlighting escalating cyber tensions between Washington and Beijing.

Italy has extradited the alleged Chinese hacker Xu Zewei to the United States, where he will face a federal trial in Houston for a campaign that targeted pandemic‑related research. The move underscores growing diplomatic pressure on Beijing over state‑backed cyber‑espionage.

Extradition After Milan Arrest

Italian police detained Xu in July 2025 in Milan on suspicion of conducting cyberattacks against universities and research institutions involved in COVID‑19 vaccine development. The National Police described him as a “dangerous foreign hacker” and transferred him to U.S. custody on 28 April 2026.

  • Arrest location: Milan, Italy
  • Age of suspect: 34
  • Alleged campaign name: Hafnium
  • Targeted sectors: universities, immunologists, virologists, law firms

Legal Charges and Potential Sentencing

In the U.S. District Court for the Southern District of Texas, Xu faces nine criminal counts, including wire fraud and conspiracy to obtain information by unauthorized access to protected computers.

  • Number of charges: 9
  • Maximum penalty per count: up to 20 years in prison
  • Potential total exposure: > 180 years if sentenced consecutively

Implications for U.S.–China Cyber Relations and Pandemic Research Security

The case spotlights the broader “Hafnium” operation, which exploited email‑software vulnerabilities to infiltrate thousands of computers worldwide. U.S. officials, led by Assistant Attorney General for National Security John A. Eisenberg, emphasized a commitment to pursue hackers who threaten national security and critical research.

  • Alleged sponsor: China’s Ministry of State Security
  • Employer at time of attacks: Shanghai Powerock Network
  • Key target: a university in southern Texas and a Washington, D.C. law firm

What the Case Could Mean for Future Cyber‑Espionage Prosecutions

If convicted, Xu could set a precedent for harsher penalties against state‑backed cyber actors, potentially prompting tighter extradition agreements between European allies and the United States. The outcome may also pressure Beijing to either curb covert operations or double down on denials, influencing diplomatic negotiations on broader technology and trade issues.

Analysts expect increased vigilance from U.S. agencies, more resources allocated to securing academic and medical research networks, and a possible wave of similar extraditions as allies cooperate to counter transnational hacking campaigns.