What happened

US agencies assessed that PRC state-sponsored actors tracked as Volt Typhoon compromised IT networks of US critical-infrastructure organizations — including energy, communications, transportation and water — and maintained access in some environments for at least five years, using living-off-the-land techniques and valid accounts to evade detection. The stated concern is pre-positioning for disruptive or destructive attacks against operational technology in a crisis or conflict, rather than espionage alone. No disruption of energy operations has been publicly confirmed. This is a campaign record; the marker is a country-level reference, not a facility.

When cited sources give different casualty, damage or spill figures for this event, they’re reported side by side above rather than merged into one number. See how confidence levels work.