Google Disrupts Chinese-Linked Hacking Group UNC2814
Analysis based on 13 articles · First reported Feb 25, 2026 · Last updated Feb 25, 2026
The disruption of the Chinese-linked hacking group by Google is a positive for cybersecurity firms and telecommunications companies, as it reduces the threat of data breaches. However, the ongoing cyber espionage activities linked to China could lead to increased geopolitical tensions and further investment in cybersecurity measures across various industries.
Google has successfully disrupted a Chinese-linked hacking group, UNC2814 (also known as 'Gallium'), which had breached at least 53 organizations across 42 countries over nearly a decade. The group primarily targeted government organizations and telecommunications companies for surveillance and data theft. Google, in collaboration with unnamed partners, terminated Google===Google Cloud Platform projects used by the hackers, disabled their internet infrastructure, and shut down accounts used to access Google===Google Sheets for malicious activities. While Google clarified that its products were not compromised, the hackers exploited Google===Google Sheets to evade detection. China, through its embassy spokesperson Liu Pengyu, denied involvement and condemned hacking activities, emphasizing dialogue and cooperation on cybersecurity. This event highlights persistent cyber espionage concerns, distinct from other Chinese hacking campaigns like 'Salt Typhoon' which targeted US organizations.
Set up alerts, explore entity relationships, search across thousands of events, and build custom intelligence feeds.
Open Dashboard