The U.S. Embassy in Fiji said hackers linked to China were suspected of breaking into the network of a regional organization based in Suva and of keeping access for several days, Reuters reported Monday. The disclosure is a rare public U.S. attribution of an intrusion inside a Pacific partner country. It signals that Washington is prepared to name suspected Chinese espionage against institutions in a region where the two powers compete for influence.

What Happened

According to Reuters, the embassy said the breach took place between July and August 2026. The embassy, which covers Fiji, Kiribati, Nauru and Tuvalu, said it notified the Fijian government and the affected organization and gave them technical recommendations for securing their networks.

The embassy did not name the organization or a hacker group. Reuters’ report did not say what information, if any, the intruders reached, and it did not describe the evidence behind the embassy’s conclusion that the hackers were linked to China. The Fijian government did not immediately respond to Reuters’ request for comment, and the report carried no response from China.

RelatedIsraeli Ad Firm Turned Targeted Ads Into Zero-Click Spyware Delivery, Researchers Say

The embassy’s statement could not be opened on its website when The Primary Wire checked, so this account relies on Reuters.

Why It Matters

The victim is described as a regional organization, not a single national agency. A network that serves several island states can hold correspondence, negotiating positions or other information that belongs to more than one government, which makes such bodies attractive to espionage operators and makes a breach harder to contain diplomatically.

For U.S. policymakers, the decision to go public matters as much as the intrusion itself. By notifying Fiji and publicizing the case, the embassy is treating cyber defense as part of its relationship with Pacific partners. Governments and companies that exchange data with Pacific regional institutions, including U.S. agencies, aid groups and contractors, should treat those connections as a possible route for attackers and check how much access they extend.

The case also adds to a run of U.S. actions against suspected Chinese hacking this month. Reuters noted that the Justice Department earlier in October seized seven internet domains it said were used to scan and hack U.S. and foreign critical infrastructure by hackers accused of working with a Chinese IT company.

Context

Reuters also cited research from security company Proofpoint, which has said Chinese hackers have impersonated AI experts since at least 2025 to steal passwords from people at think tanks, universities and law firms. The Primary Wire reported on that campaign Oct. 1. Proofpoint is a vendor, and its attribution is its own.

Neither the Proofpoint findings nor the domain seizure has been tied to the Fiji intrusion, and the embassy did not connect them.

What to Watch

Key questions are whether the affected organization identifies itself, whether Fiji’s government or China responds publicly, and whether U.S. agencies publish technical indicators, the digital fingerprints defenders use to spot the same intruders on their own networks. A named group or shared indicators would let other Pacific institutions check whether they were targeted too.