The person at the center of this case
United States and foreign employees and computers of three corporate victims in financial, engineering, and technology industries
Cold Case · Open
9 years waiting · since 2017
BOYUSEC HACKERS
Justice for United States and foreign employees and computers of three corporate victims in financial, engineering, and technology industries — the trail went cold in 2017, but the truth hasn't.
Start here
Key leads to think about
🎯
suspect
Lead #1What is the current location and status of the three indicted hackers in China, and have extradition efforts been pursued?
🔍
evidence
Lead #2How were the 400+ gigabytes of stolen data used, and which specific companies were victimized?
💡
clue
Lead #3What role did Guangzhou Bo Yo Information Technology Company Limited play in directing or facilitating these cyberattacks?
Three Chinese nationals—Xia Lei, Wu Yingzhuo, and Dong Hao—were indicted in September 2017 for operating as hackers for Boyusec, a Chinese-based internet security firm, and conspiring to steal trade secrets and sensitive data from U.S. and foreign companies. Between 2011 and May 2017, they allegedly hacked into computers at financial, engineering, and technology firms, obtaining at least 400 gigabytes of confidential documents and emails. The case remains significant as an example of state-sponsored or state-affiliated cyber espionage targeting American corporate infrastructure, with the perpetrators remaining at large in China.
Case
#982
United States and China
Federal Bureau of Investigation (FBI)
Try asking
Claim this imported case
A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.
10 uploads25 AI questions/day
This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.
More leads to consider
Beyond the top three above — each detail below could be the thread that pulls this case open.
📞
contact
Lead #4Were there any identified intermediaries or handlers directing the hackers' activities from Chinese government entities?
Have information about any of these leads?
Even the smallest detail could be the key to solving this case.
Official wording
Source Narrative
Conspiracy to Commit Computer Fraud and Abuse; Conspiracy to Commit Trade Secret Theft; Wire Fraud; Aggravated Identity Theft Caution: Xia Lei, Wu Yingzhuo, and Dong Hao, all of whom are Chinese nationals and residents of China, were indicted on September 13, 2017, for conspiring to commit computer fraud and abuse, conspiring to commit trade secret theft, wire fraud, and aggravated identity theft. The charges stem from the three individuals alleged attempt to direct their crimes against United States and foreign employees and computers of three corporate victims in financial, engineering, and technology industries between 2011 and May of 2017.
The indictment alleges that the three hackers, who worked for the purported Chinese-based Internet security firm Guangzhou Bo Yo Information Technology Company Limited (also known as "Boyusec"), conspired to hack into private corporate entities in order to maintain unauthorized access to, and steal sensitive internal documents and communications from, those entities' computers. In total, the hackers obtained at least 400 gigabytes of data, as well as confidential emails, from their victims.
Timeline of Events
📋
2011
Hacking campaign begins
Alleged conspiracy to hack into private corporate entities begins
📋
2017-05
Hacking campaign ends
Last alleged unauthorized access and data theft activities
🕵️
2017-09-13
Indictment issued
Xia Lei, Wu Yingzhuo, and Dong Hao indicted for conspiracy to commit computer fraud and abuse, trade secret theft, wire fraud, and aggravated identity theft
Case Information
Incident:January 1, 2011
Last Updated:September 9, 2026
Leave a comment
Comments
Case Information
Incident:January 1, 2011
Last Updated:September 9, 2026