Italy Extradites Chinese Hacker Accused of Stealing COVID-19 Vaccine Research to US

Italy has extradited Xu Zewei, a 34-year-old Chinese hacker accused of orchestrating cyberattacks to steal COVID-19 vaccine research from US universities and institutions. Arrested in Milan in July 2025, Xu is now facing nine criminal charges in a Houston federal court, including wire fraud and conspiracy.

This case highlights ongoing concerns about state-sponsored cyber-espionage targeting critical scientific research during global crises. The US Department of Justice emphasizes its commitment to prosecuting hackers who threaten national cybersecurity and intellectual property.

The Arrest and Extradition of a High-Profile Cyber Suspect

Italian authorities arrested Xu Zewei in Milan in July 2025, describing him as a “dangerous foreign hacker.” Following his arrest, Italy extradited him to the United States where he appeared in court in Houston, Texas, to face multiple charges related to cyberattacks on institutions involved in COVID-19 research.

Alleged Cyber-Espionage Campaign Tied to China’s Ministry of State Security

US prosecutors allege that Xu and his co-conspirators exploited vulnerabilities in email software to infiltrate thousands of computers. This operation, known as the “Hafnium” campaign, targeted universities, immunologists, virologists, and law firms, including a university in southern Texas and a Washington, DC-based law firm.

The Department of Justice states that Xu was employed by Shanghai Powerock Network, a company enabling these cyber-espionage activities under the direction of China’s Ministry of State Security.

Legal Proceedings and Potential Consequences

Xu faces nine criminal counts, including wire fraud and conspiracy to obtain information by unauthorized access to protected computers. If convicted, he could face up to 20 years in prison for each serious charge.

“The United States is committed to pursuing hackers who steal information from US businesses and universities and threaten our cybersecurity,” said Assistant Attorney General for National Security John A Eisenberg. “I commend the prosecutors and investigators who have worked hard and sought justice for years in this investigation, and we look forward to proving our case in court.”—John A Eisenberg, Assistant Attorney General for National Security

International Reactions and Future Outlook

The Chinese Embassy in Washington, DC, has not responded to requests for comment. Beijing has previously denied allegations of state-sponsored hacking, labeling such claims as “groundless accusations” and “smears.”

This extradition and prosecution underscore the increasing global focus on cybersecurity and the protection of sensitive research, especially during public health emergencies. The case may set a precedent for future international cooperation in combating cyber-espionage.