The US Embassy in Fiji reported that a regional organization in the capital city of Suva in Fiji was suspected of being hacked by hackers linked to China during the summer this year. The US has notified the Fijian government and the affected institutions about the situation and provided recommendations for cybersecurity protection.
The Fiji Times reported on Tuesday (October 13) that the US Embassy revealed that the organization’s computer network may have been compromised between July and August this year. The hackers allegedly continued to access the organization’s network for several days.
The US Embassy in Fiji stated that they have informed the Fijian government and the affected institutions about the suspected security incident and provided technical advice to help strengthen cybersecurity and prevent unauthorized access from happening again.
At present, the US has not disclosed the name of the organization, the information accessed by the hackers, or whether any sensitive data was stolen. Public information also does not specify the specific losses caused by this network breach.
According to local media FijiVillage, Fiji police and Minister for Communications Ioane Naivalurua stated that the government is investigating this suspected cyber-attack incident.
The US Embassy in Fiji mentioned that the disclosure aims to raise awareness of what the US describes as cybersecurity threats in Pacific island nations, particularly the involvement of state-sponsored hackers with ties to China targeting foreign governments, multilateral organizations, and telecommunications networks.
As this incident unfolded, the US has been taking measures to combat state-sponsored hacking activities supported by the Chinese government.
The US Embassy in Fiji also noted that the US Department of Justice and the Federal Bureau of Investigation legally seized domain names related to the network attack platforms “QScan” and “QTRouter” in August this year. The platforms were allegedly developed and operated by the Chinese government-supported hacker group QTFY and targeted critical infrastructures and sensitive networks in the US.
Furthermore, on October 8, the US Department of Justice announced the legal seizure of seven internet domain names to disrupt the operations of the “Microscan” and “FishHub” network intrusion tools. These tools are associated with the Chinese information technology company Integrity Technology Group and have been used to scan critical infrastructure and networks in the US and other countries for potential intrusions.
In addition, cybersecurity company Proofpoint stated earlier this month that a Chinese-backed hacker group they have been tracking since 2025 has been conducting credential phishing attacks against think tanks, universities, defense contractors, and law firms personnel. In July this year, the group posed as artificial intelligence policy experts and economists in an attempt to steal the account credentials of relevant individuals. Proofpoint believes that these activities may be aimed at gathering intelligence on US artificial intelligence policy and regulation.
There is currently no public evidence confirming any connection between the above cases and the recent network intrusion incident in Fiji. The US Embassy in Fiji also did not disclose the specific techniques used by hackers in this incident, the basis for determining the source of the attack, or the actual damages that may have occurred.