US Embassy Reports Suspected China-Linked Cyberattack On Fiji-Based Regional Organisation

The US Embassy in Fiji has reported a suspected cyberattack involving China-linked hackers targeting an unnamed regional organisation based in Suva. The intrusion reportedly occurred between July and August 2026, with attackers maintaining network access for several days, although the extent of the compromise remains unknown.

 

TL;DR

 

• The US Embassy reported a suspected China-linked compromise of a regional organisation's network in Suva, Fiji.
• The activity occurred between July and August 2026, with hackers reportedly retaining access for several days.
• US officials notified Fiji's government and the affected organisation, providing technical recommendations.
• Fiji is reviewing the incident, while the Chinese Embassy has criticised the US approach to cybersecurity allegations.

 

US Embassy Reports Suspected China-Linked Cyberattack In Fiji

 

The US Embassy in Fiji revealed that it recently informed the Fijian Government and a regional organisation based in Suva about a suspected compromise of the organisation's computer network.

The suspected intrusion took place between July and August 2026, although the exact dates have not been disclosed.

"Hackers with links to China maintained access to the organization's network over several days," the Embassy said in a statement reproduced by The Fiji Times.

The Embassy said it provided technical recommendations to the Fijian Government and the affected organisation to help secure their networks against further unauthorised access.

However, it did not identify the organisation or reveal what information the attackers might have accessed.

According to fijivillage, the Embassy declined to share additional details, explaining that its public disclosure was intended to highlight a broader pattern of suspected state-sponsored cyber activity across Pacific Island countries.

The US believes China-linked threat actors have increasingly targeted foreign governments, multilateral organisations and telecommunications networks in the region.

However, the Embassy has not publicly identified a specific hacking group, described the method used to compromise the Suva-based organisation, or released technical evidence linking the incident to a named Chinese state-sponsored operation.

 

Fiji Government Reviews Cyberattack As China Responds To US Claims

 

Fiji's Minister for Policing and Communications, Ioane Naivalurua, confirmed that the government was reviewing the suspected cyberattack.

According to local reporting, the minister acknowledged the US Embassy's notification but did not announce the findings of an investigation.

Meanwhile, the Chinese Embassy in Fiji criticised what it described as double standards and political manipulation surrounding cybersecurity allegations.

As reported by Mai TV Fiji, the Chinese Embassy rejected the politicisation of cybersecurity issues and urged the US to address cyber threats through dialogue and cooperation.

"Cybersecurity is an issue of common concern for China and the U.S.," reads a statement also published by China's Foreign Ministry.

The official Foreign Ministry statement was originally issued on October 9, 2026, in response to separate US allegations concerning Chinese hacking infrastructure.

China has consistently denied supporting malicious hacking activities and has accused Washington of using cybersecurity allegations for political purposes.

 

US Targets Separate China-Linked Hacking Infrastructure

The Fiji disclosure comes days after the US Department of Justice announced another cybersecurity operation involving suspected Chinese state-sponsored hackers.

On October 8, the US Department of Justice and FBI announced the seizure of seven internet domains linked to hacking tools allegedly operated by actors associated with China-based Integrity Technology Group.

According to US authorities, the operation disrupted two tools known as Microscan and FishHub, which had been used to scan networks for vulnerabilities and, in some cases, gain unauthorised access to computer systems.

The tools were allegedly associated with activity tracked as Flax Typhoon, a hacking operation linked by US officials to the Chinese government.

Targets reportedly included critical infrastructure operators, universities and other organisations across multiple countries.

However, there is no publicly established connection between the Flax Typhoon infrastructure described in the Justice Department announcement and the suspected intrusion in Fiji.

   

What Remains Unknown About The Fiji Cyberattack?

 

The suspected intrusion raises concerns about the security of organisations handling communications and potentially sensitive information across the Pacific region.

However, several important details remain undisclosed, including the affected organisation's identity, the initial entry point, the systems accessed and whether any information was stolen.

The US Embassy has provided technical recommendations, but neither the Fijian Government nor the affected organisation has publicly outlined the remediation measures undertaken.

For now, Fiji's review remains the most immediate official response, with no public timetable announced for the release of additional findings.

The central unresolved question is not simply who may have accessed the network, but what information was exposed, if any, and whether the affected organisation has fully secured its systems.