The FBI confirmed it detected and addressed "suspicious" activity on its networks but offered no further details. Sources say the affected systems are the bureau's internal "digital collection system," a set of tools described by the EFF as used for wiretaps and pen registers. CBS News could not verify the timing, perpetrators or whether data was compromised. The report notes prior 2024 activity attributed to the China-linked group "Salt Typhoon," which targeted U.S. telecoms and intelligence systems.
FBI Confirms 'Suspicious' Activity Targeted Its Digital Collection Systems
The Federal Bureau of Investigation said on Thursday that it detected and responded to "suspicious" activity on its networks but provided few additional details.
"The FBI identified and addressed suspicious activities on FBI networks, and we have leveraged all technical capabilities to respond. We have nothing additional to provide," the bureau said in a statement.
Sources familiar with the matter told reporters that the systems targeted in the incident are known internally as the bureau's "digital collection system." Decades-old documents obtained by the Electronic Frontier Foundation (EFF) under the Freedom of Information Act describe the FBI's "Digital Collection Systems Network" as a suite of software tools used for a broad range of electronic surveillance tasks, including wiretaps and pen registers that collect phone numbers, IP addresses, signaling and related metadata in real time.
CBS News said it could not independently verify additional details about the intrusion — including when it occurred, who was responsible or whether any information was accessed or exfiltrated. The FBI did not disclose whether the agency has opened a public investigation or notified affected parties.
Security reporting has previously linked a China-associated, state-sponsored group known as "Salt Typhoon" to a 2024 campaign that targeted major U.S. telecommunications firms and systems relied upon for intelligence wiretapping. CBS and other outlets have reported that the same group allegedly attempted to access phones or networks tied to several prominent U.S. political figures.
With few public details available, the full scope and impact of the episode remain unclear. Cybersecurity experts say intrusions that touch collection systems can raise serious operational and privacy concerns, but attribution and damage assessments require further investigation and confirmation from the bureau or independent sources.
Help us improve.
