A citizen of the People’s Republic of China, Xu Zewei, appeared in Houston federal court on April 27 following his extradition from Italy to face a nine-count indictment related to computer intrusions between February 2020 and June 2021.
The case highlights international efforts to address cyberattacks targeting U.S. institutions, including alleged theft of COVID-19 research and large-scale hacking campaigns. The U.S. Attorney for the Southern District of Texas focuses on prosecuting federal crimes and handling civil cases for the government, according to the official website.
Xu is accused of participating in computer intrusions as part of the HAFNIUM campaign that compromised thousands of computers worldwide. Some attacks allegedly targeted COVID-19 research at U.S.-based universities during the pandemic. Court documents allege that officers from China’s Ministry of State Security’s Shanghai State Security Bureau directed Xu’s activities while he worked for Shanghai Powerock Network Co. Ltd., a company accused of conducting hacking operations for the Chinese government.
“Today, Xu Zewei will stand in a federal courtroom to answer for crimes that struck at the heart of American science and security — allegedly stealing COVID-19 research from our universities when the world needed it most,” said Acting U.S. Attorney John G.E. Marck for the Southern District of Texas. “We have pursued this moment across years and continents, and the message this office sends today is the same one we sent when we first unsealed this indictment: we will work to protect the American people.”
Assistant Attorney General for National Security John A. Eisenberg said, “The United States is committed to pursuing hackers who steal information from U.S. businesses and universities and threaten our cybersecurity.” Assistant Director Brett Leatherman of the FBI’s Cyber Division added, “The extradition of Xu Zewei demonstrates the FBI’s reach extends well beyond U.S. borders… others who do the same face the same risk.”
According to court records, Xu allegedly hacked university networks at officers’ direction, accessed email accounts belonging to researchers studying COVID‑19 vaccines and treatments, exploited vulnerabilities in Microsoft Exchange Server software as part of HAFNIUM operations publicly disclosed by Microsoft in March 2021, and installed web shells enabling remote administration on victim systems.
Among those affected were another university located in southern Texas and an international law firm with offices including Washington D.C., according to allegations detailed in court filings.
Xu faces multiple charges carrying maximum penalties ranging from two years (for aggravated identity theft) up to twenty years per count (for wire fraud). Zhang Yu—alleged co-conspirator—remains at large; authorities urge anyone with information about his whereabouts to contact law enforcement.
The Southern District office employs more than 200 attorneys covering 43 counties with over nine million residents as detailed on its official website according to official sources. It has had leaders such as Alamdar Hamdani serving from 2022–2025 as noted historically.
The Department thanks Italian authorities—including Polizia Postale—for their cooperation during arrest proceedings in Milan leading up to extradition.
