FBI sanctions listing
APT 40 CYBER ESPIONAGE ACTIVITIES
APT 40 CYBER ESPIONAGE ACTIVITIES is an individual designated on the U.S. Federal Bureau of Investigation — Wanted (FBI) sanctions list under the Cyber's Most Wanted programme, listed on 2020-11-24. Cyber's Most Wanted. This page summarises the public designation — known aliases, identifying particulars, the stated reason for listing and linked parties — alongside an independent, transparent risk indicator.
Reason for listing
Conspiracy to Damage Protected Computers and Commit Economic Espionage; Criminal Forfeiture On May 28, 2021, a federal grand jury in the United States District Court for the Southern District of California returned an indictment against four People’s Republic of China (PRC) citizens for their alleged roles in a long running campaign of computer network operations targeting trade secrets, intellectual property, and other high value information from companies, universities, research institutes, and governmental entities in the United States and abroad, as well as multiple foreign governments. The indictment alleges that Zhu Yunmin, Wu Shurong, Ding Xiaoyang, and Cheng Qingmin targeted the following sectors: aerospace/aviation, biomedical, defense industrial base, healthcare, manufacturing, maritime, research institutes, transportation (rail and shipping), and virus research from 2012 to 2018, on behalf of the PRC Ministry of State Security. Additionally, the indictment alleges the use of front companies by the PRC Ministry of State Security to conduct cyber espionage. The four individuals are identified as: ZHU Yunmin 朱允敏 (STC Codes: 2612/0336/2404) Alias: Zhu Rong WU Shurong 吴淑荣 (STC Codes: 0702/3219/2837) Aliases: goodperson, ha0r3n, Shi Lei DING Xiaoyang 丁晓阳 (STC Codes: 0002/2556/7122) Aliases: Ding Hao, Manager Chen CHENG Qingmin 程庆民 (STC Codes: 4453/1987/3046) Alias: Manager Cheng
Statement of reasons as published by US FBI. This is the issuing authority's wording, reproduced for reference.
Designation record
| List / authority | US FBI (FBI) — FBI — Cyber's Most Wanted |
|---|---|
| Entity type | Person |
| Programmes / regime | Cyber's Most Wanted |
| Date listed | 2020-11-24 |
| Source record ID | fbi:238d300cab9e496a87c12b9867d8e875 |
| Last updated (our copy) | 2026-06-04 |
Identity & particulars
| Position / role | Cyber's Most Wanted |
|---|
Deep-research dossier
Not yet deep-researched
The instant review above is drawn from the public lists. A deep-research dossier goes much further — an analyst-grade OSINT report: associate & co-investment network screening, structural / ownership opacity, a dated risk trajectory, an 8-factor scoring model, and numbered, source-linked evidence. See the format in the design system.
Clarifications & right of reply
Are you APT 40 CYBER ESPIONAGE ACTIVITIES, or an authorised representative?
You — or your counsel or agent — can file a clarification and supporting documents against this record. Filings are reviewed and verified before anything is published; submissions are never posted automatically.
File a clarification or document
Source & provenance
| Issuing authority | U.S. Federal Bureau of Investigation — Wanted |
|---|---|
| Source identifier | fbi:238d300cab9e496a87c12b9867d8e875 |
| Aggregated by | Sanctiometer (independent) — verify against the issuing authority's official list before acting. |