Page:2020-06-09 PSI Staff Report - Threats to U.S. Communications Networks.pdf/69

This page has been proofread, but needs to be validated.

had points of presence in 11 U.S. cities, as well as eight data centers in four U.S. cities.[1]

Following the meeting, Team Telecom requested additional information about CTA's security policies and procedures, including whether Chinese security agencies had inspected or otherwise required information concerning CTA's operations.[2] Although CTA informed Team Telecom that no security agencies had inspected or required information gathering regarding CTA's operations, it did acknowledge that its procurement processes, including that of network equipment and software, are led by China Telecom.[3]

4. Team Telecom Did Not Engage CTA regarding Public Allegations that China Telecom and Its Affiliates Hijacked and Rerouted Data through China

As described above, hijacking communications is easier with the support of a complicit and preferably largescale carrier.[4] Public reports allege that China Telecom and its affiliates have hijacked and rerouted data through China on multiple occasions for more than a decade.[5] Nevertheless, Team Telecom did not address the allegations until early 2019.

a. Allegations of China Telecom Hijacking Communications Data Date Back to 2010

In April 2010, online reports alleged that China Telecom originated approximately 37,000 false routes in less than 20 minutes.[6] Customers of Telefonica, Qwest, Deutsche Telekom, Level 3 Communications, AT&T, and NTT allegedly had their communications hijacked and rerouted through China.[7] According to analysts, "China absorbed 15% of the traffic from U.S. military and civilian networks."[8] According to the U.S.-China Economic and Security Review Commission,


  1. TT-DOJ-507-20, at TT-DOJ-514-15. The points of presence were located in Palo Alto, CA; San Jose, CA; Los Angeles, CA; Hillsboro, OR; Denver, CO; New York, NY; Seattle, WA; Ashburn, VA; Miami, FL; Chicago, IL; and Dallas, TX. CTA also reported a point of presence in Toronto, Ontario, Canada. See TT-DOJ-514. CTA's data centers included four locations in Santa Clara, CA; one location each in Los Angeles, CA and Dallas, TX; and two locations in Ashburn, VA. See TT-DOJ-515.
  2. TT-DOJ-180-81.
  3. TT-DOJ-189-91.
  4. Shavitt & Demchak, supra note 109, at 3.
  5. See, e.g., Shavitt & Demchak, supra note 109, at 3.
  6. U.S.-China Econ. & Sec. Review Comm'n, Report to Congress 1, 243-44 (2010); Toonk, supra note 121.
  7. Toonk, supra note 121.
  8. Diaz, supra note 121. See also U.S.-China Economic & Security Review Commission, Report to Congress 244 (2010). Cf. Toonk, supra note 121.

65