Brian Smith, Assistant Secretary for Financial Markets | https://www.linkedin.com/in/brian-smith-74060563/
The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) has sanctioned Zhou Shuai, a Shanghai-based hacker and data broker, along with his company, Shanghai Heiying Information Technology Company, Limited. This action is part of ongoing efforts to combat cyber threats originating from China. Zhou Shuai collaborated with Yin Kecheng, another malicious actor previously sanctioned by the U.S., to illegally acquire and sell sensitive data from critical U.S. infrastructure networks.
Bradley T. Smith, Acting Under Secretary of the Treasury for Terrorism and Financial Intelligence, stated: "Today’s action underscores our resolve to hold accountable malicious cyber actors like Zhou who continue to target U.S. government systems, the data of U.S. companies, and our citizens." He emphasized that the United States is determined to disrupt this criminal ecosystem using all available tools.
This designation follows recent actions by the Treasury against other Chinese entities involved in cyber activities targeting U.S. interests. Notably, Yin Kecheng was sanctioned on January 17, 2025, for his role in compromising the Department of the Treasury's network.
The Department of Justice has unsealed indictments against both Yin Kecheng and Zhou Shuai for their involvement in these cyber activities. Additionally, the Department of State announced a reward offer up to $2 million for information leading to their arrest or conviction.
Zhou Shuai has been active as a data broker since at least 2018, selling illegally obtained data and access to compromised networks. His operations included targets within the United States and other regions such as Russia and Western Europe.
Shanghai Heiying Information Technology Company was established by Zhou in 2010 and has employed several known malicious actors including Yin Kecheng. OFAC's sanctions block all property and interests related to these individuals within U.S jurisdiction.
Violations of these sanctions could lead to civil or criminal penalties for both U.S. and foreign persons involved in prohibited transactions with designated entities or individuals.
OFAC maintains that its sanctions aim not only at punishment but also at encouraging positive behavioral changes among those designated.
For further details on today's designations or how entities can seek removal from sanction lists, OFAC provides additional resources online.
