Chinese national Xu Zewei appeared in federal court in Houston on April 27, 2026, following extradition from Italy, to answer a nine-count indictment charging him with computer intrusion offenses connected to a campaign targeting U.S. universities between 2020 and 2021 [1]. Prosecutors allege that Xu and a co-conspirator conducted hacking operations directed at researchers working on COVID-19 vaccines and treatments, stealing data from immunologists and virologists at American academic institutions [1].
According to the indictment, officials within China's Ministry of State Security and the Shanghai State Security Bureau recruited Xu and his alleged co-conspirator and directed the targeting of U.S. medical research during the height of the pandemic [1]. The case proceeds under federal computer fraud and intrusion statutes, with the Southern District of Texas serving as the venue following Xu's transfer from Italian custody [1]. The extradition itself marks a significant procedural development, as U.S.-Italy cooperation on cybercrime cases involving Chinese nationals has been relatively rare.
The charges fit a documented pattern that the Department of Justice has pursued through multiple prosecutions: Chinese intelligence services leveraging civilian contractors or recruited hackers to conduct operations that provide plausible deniability for state-directed espionage [1]. COVID-19 vaccine and treatment research represented high-value intelligence targets during 2020 and 2021, and U.S. prosecutors and allied governments repeatedly identified Chinese state-affiliated actors as responsible for intrusions into pharmaceutical and university networks during that period [1]. The nine-count structure of the indictment suggests prosecutors are pursuing charges across multiple intrusion incidents or victim institutions, though the specific counts have not been fully detailed in publicly available filings.
Xu's initial appearance marks the formal commencement of proceedings in Houston. Arraignment and the entry of a plea are likely next steps, with pretrial motions and discovery to follow on a schedule set by the district court. Whether the unnamed co-conspirator faces parallel proceedings, and whether that individual remains at large or in foreign custody, has not been publicly confirmed. The case adds to a substantial DOJ docket of Chinese cyberespionage prosecutions and will likely draw scrutiny from national security oversight committees given the alleged direction of the hacking by named Chinese government agencies.
Comments (0)