The person at the center of this case
U.S. and foreign employees and computers of three corporate victims in financial, engineering, and technology industries
Cold Case · Open
9 years waiting · since 2017
BOYUSEC HACKERS
Justice for U.S. and foreign employees and computers of three corporate victims in financial, engineering, and technology industries — the trail went cold in 2017, but the truth hasn't.
Start here
Key leads to think about
🔍
evidence
Lead #1Over 400 gigabytes of stolen data and confidential emails obtained from corporate victims—what specific trade secrets were compromised?
🎯
suspect
Lead #2All three suspects are Chinese nationals residing in China; what is the current status of extradition efforts?
👤
person
Lead #3Connection between the three hackers and Boyusec (Guangzhou Bo Yo Information Technology Company Limited)—was the company knowingly facilitating these crimes?
Three Chinese nationals—Xia Lei, Wu Yingzhuo, and Dong Hao—were indicted in September 2017 for operating as hackers for Boyusec, a Chinese-based Internet security firm, and stealing over 400 gigabytes of data from U.S. and foreign companies in financial, engineering, and technology sectors between 2011 and May 2017. The conspiracy involved unauthorized computer access, trade secret theft, wire fraud, and identity theft targeting corporate victims across multiple industries. The case remains open as the suspects are believed to be residing in China, making extradition and apprehension a continuing challenge for federal investigators.
Try asking
Claim this imported case
A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.
10 uploads25 AI questions/day
This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.
More leads to consider
Beyond the top three above — each detail below could be the thread that pulls this case open.
💡
clue
Lead #4Attacks targeted three separate corporate victims across financial, engineering, and technology sectors—were these coordinated espionage efforts?
Have information about any of these leads?
Even the smallest detail could be the key to solving this case.
Official wording
Source Narrative
Conspiracy to Commit Computer Fraud and Abuse; Conspiracy to Commit Trade Secret Theft; Wire Fraud; Aggravated Identity Theft Caution: Xia Lei, Wu Yingzhuo, and Dong Hao, all of whom are Chinese nationals and residents of China, were indicted on September 13, 2017, for conspiring to commit computer fraud and abuse, conspiring to commit trade secret theft, wire fraud, and aggravated identity theft. The charges stem from the three individuals alleged attempt to direct their crimes against United States and foreign employees and computers of three corporate victims in financial, engineering, and technology industries between 2011 and May of 2017.
The indictment alleges that the three hackers, who worked for the purported Chinese-based Internet security firm Guangzhou Bo Yo Information Technology Company Limited (also known as "Boyusec"), conspired to hack into private corporate entities in order to maintain unauthorized access to, and steal sensitive internal documents and communications from, those entities' computers. In total, the hackers obtained at least 400 gigabytes of data, as well as confidential emails, from their victims.
Timeline of Events
🕵️
2011-01-01
Hacking campaign begins
Alleged conspiracy to hack into private corporate entities begins
🕵️
2017-05-31
Hacking campaign ends
Last known date of alleged hacking activity against corporate victims
🕵️
2017-09-13
Indictment issued
Xia Lei, Wu Yingzhuo, and Dong Hao indicted for conspiracy to commit computer fraud and abuse, trade secret theft, wire fraud, and aggravated identity theft
Key Locations
Interactive map showing important locations related to this case
Case Information
Incident:January 1, 2011
Last Updated:October 30, 2026
Leave a comment
Comments
Case Information
Incident:January 1, 2011
Last Updated:October 30, 2026