{
	"id": "e01da17b-ecb4-4249-92d6-771e699a5a3c",
	"created_at": "2026-04-06T00:17:29.189181Z",
	"updated_at": "2026-04-10T03:22:13.193978Z",
	"deleted_at": null,
	"sha1_hash": "bc716218a84d00f3b4233a99a91c971dbe97ed36",
	"title": "Chinese national indicted for 2015 Anthem breach",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 31502,
	"plain_text": "Chinese national indicted for 2015 Anthem breach\r\nBy Sean Lyngaas\r\nPublished: 2019-05-09 · Archived: 2026-04-05 16:32:20 UTC\r\nA federal grand jury has indicted a Chinese national for being part of an “extremely sophisticated hacking group”\r\nthat breached U.S. businesses, including the seminal 2015 hack of health insurer Anthem that exposed personal\r\ninformation on nearly 79 million people.\r\nThe indictment unsealed Thursday alleges that 32-year-old Fujie Wang breached Anthem and three other unnamed\r\nU.S. businesses, scoping out personally identifiable information (PII) and confidential business data.\r\nAnother person identified only as John Doe was also indicted.\r\nThe two defendants were charged with conspiracy to commit fraud and “related activity in relation to computers\r\nand identity theft,” along with conspiracy to commit wire fraud and “two substantive counts of intentional damage\r\nto a protected computer,” the Department of Justice announced.\r\nThe Anthem breach compromised sensitive personal data, including Social Security numbers, and prompted a\r\nrecord $16 million settlement with the U.S. government over potential Health Insurance Portability and\r\nAccountability Act (HIPAA) violations.\r\nThe indictment, unsealed in a federal court in Indianapolis — where Anthem is headquartered — outlines how the\r\ndefendants allegedly infiltrated their targets. They went after employees of the victim organizations with\r\nspearphishing emails, which were used to install backdoor tools for remote access to networks, according to the\r\nindictment. After locating the information they wanted to steal, Wang and Doe allegedly extracted the data by\r\nbundling it in encrypted archiving files and then routing the data through multiple computers back to China.\r\nIn the case of Anthem, Wang and Doe bided their time in devising their attack, according to prosecutors, surveying\r\nthe health insurer’s enterprise data center, which housed the PII, throughout October and November 2014.\r\nMatt Gorham, assistant director of the FBI’s Cyber Division, credited the communication between victim\r\norganizations and the bureau in tracking down the alleged culprits.\r\n“Because the victim companies promptly notified the FBI of malicious cyber activity, we were able to\r\nsuccessfully investigate and identify the perpetrators of this large-scale, highly sophisticated scheme,” Gorham\r\nsaid in a statement.\r\nAn Anthem spokesperson could not immediately be reached for comment.\r\nSource: https://www.cyberscoop.com/anthem-breach-indictment-chinese-national/\r\nhttps://www.cyberscoop.com/anthem-breach-indictment-chinese-national/\r\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"Malpedia",
		"ETDA",
		"MISPGALAXY"
	],
	"references": [
		"https://www.cyberscoop.com/anthem-breach-indictment-chinese-national/"
	],
	"report_names": [
		"anthem-breach-indictment-chinese-national"
	],
	"threat_actors": [],
	"ts_created_at": 1775434649,
	"ts_updated_at": 1775791333,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/bc716218a84d00f3b4233a99a91c971dbe97ed36.pdf",
		"text": "https://archive.orkl.eu/bc716218a84d00f3b4233a99a91c971dbe97ed36.txt",
		"img": "https://archive.orkl.eu/bc716218a84d00f3b4233a99a91c971dbe97ed36.jpg"
	}
}