CHINESE HACKERS BREACHED CUBAN EMBASSY DURING US BLOCKADE
SECURITY DESK■ 2 MIN READ
SAT, MAY 9, 2026■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE
Chinese hackers infiltrated Cuba's Washington embassy to monitor diplomatic communications as the US prepared a naval blockade, according to cybersecurity firm Gambit Security.
The breach targeted dozens of Cuban diplomats at the embassy during a period of heightened US-Cuba tensions. Gambit Security's investigation revealed that the hackers accessed sensitive embassy communications, providing Chinese intelligence with visibility into Cuban diplomatic activities at a critical moment.
The timing of the operation coincided with US preparations for a naval blockade against Cuba, suggesting the intrusion aimed to gather intelligence on the island nation's diplomatic response to American pressure. The scope of the breach encompassed multiple diplomats' accounts and communications channels.
The incident underscores ongoing cyber espionage operations by state-sponsored actors targeting diplomatic facilities. Cuban embassy networks in Washington represent high-value targets for intelligence gathering, given the embassy's role in coordinating bilateral relations and managing communications with Cuban leadership.
Gamebit Security did not disclose the specific timeline of the breach or the extent of data exfiltrated. The firm's findings have not been independently verified by US government agencies, though such breaches typically trigger coordinated responses from the FBI and NSA.
The operation adds to a pattern of Chinese cyber activities targeting US-allied and strategic targets. Previous investigations have documented similar Chinese-backed intrusions into government networks and critical infrastructure.
Cuba faces limited cybersecurity resources compared to developed nations, making its diplomatic networks potentially more vulnerable to sophisticated state-sponsored attacks. The breach highlights how smaller nations can become collateral damage in broader geopolitical disputes between major powers.
No official response from Cuban or Chinese government representatives has been released regarding the breach. The US State Department has not publicly commented on the incident.
■ MORE FROM THE SECURITY DESK
Cybercriminals have transformed DDoS attacks into a polished, commercialized service complete with pricing tiers, customer support, and reseller programs. The DDoS-as-a-Service market has evolved from basic tools into sophisticated attack platforms.
YESTERDAY— Industry Desk
Microsoft faced backlash after threatening a security researcher with criminal investigation, reigniting debate over software vulnerability disclosure practices and corporate responsibility.
YESTERDAY— Security Desk
Google is deploying Device Bound Session Credentials (DBSC) to all Chrome users, a security feature designed to prevent account takeovers by protecting session cookies from theft.
YESTERDAY— Industry Desk
Dutch authorities have dismantled a major botnet comprising 17 million infected devices and seized over 200 servers hosting the operation at a local provider.
YESTERDAY— Security Desk