i-Soon
Chinese hacking-for-hire contractor, formally Anxun Information Technology, whose staff US prosecutors charged in 2025.
US prosecutors charged eight i-Soon employees and two Ministry of Public Security officers on 5 March 2025, the case Western agencies built on when they named another Beijing contractor, Integrity Technology Group, on 8 October 2026.
Last refreshed: 12 October 2026
What did i-Soon charge Chinese ministries per hacked inbox?
Timeline for i-Soon
Mentioned in: Ten agencies name Beijing firm in hacks
Cybersecurity: Threats and DefencesBackground
i-Soon, registered as Anxun Information Technology, presents itself as a private Chinese company. US prosecutors describe it as a key player in China's hacker-for-hire market, breaking into networks for the Ministry of Public Security (MPS), the Ministry of State Security (MSS) and on its own account.
The business came to light in February 2024, when a cache of i-Soon documents leaked on GitHub. On 5 March 2025 the US Justice Department unsealed an indictment against eight i-Soon staff and two MPS officers covering hacking from about 2016 to 2023. According to the indictment, i-Soon sold stolen data to at least 43 MSS or MPS bureaus and charged between $10,000 and $75,000 for each email inbox it broke into. The State Department offered up to $10m for information on the defendants.
The i-Soon case is the reference point for US action against China's contract hackers, and it was the yardstick when advisory AA26-281A named Integrity Technology Group in October 2026.