The United States government announced on August 26, 2026, that it has disrupted a significant cyber attack operation linked to breaches in several key federal agencies, including the US Justice Department, NASA, the Federal Reserve, and the US Senate. In a statement, the Justice Department confirmed seizing domains used by two hacking platforms, QScan and QTRouter, which were part of the campaign. The victims include the US Department of Energy, the Department of Health and Human Services, the National Institutes of Health, and four unnamed companies in the US and South Korea. The platforms were reportedly operated by Nanjing Xinjiuwei Network Technology Company, a China-based firm with clients including China's civilian intelligence agency, the Ministry of State Security, and its military, the People's Liberation Army. The group's computer infrastructure has been used since at least 2018 to compromise critical infrastructure and other sensitive networks worldwide. Experts have noted that private contractors frequently conduct high-profile intrusions on behalf of various Chinese government agencies. The Chinese Embassy in Washington did not immediately respond to a request for comment. Beijing consistently denies responsibility for hacking activities.