CIA pulled officers from Beijing after breach of federal personnel records

WASHINGTON – The CIA pulled a number of officers from the U.S. Embassy in Beijing as a precautionary measure in the wake of the massive cybertheft of the personal data of federal employees, current and former U.S. officials said.

The move is a concrete impact of the breach, one of two major hacks into Office of Personnel Management computers that were disclosed earlier this year. Officials have privately attributed the hacks to the Chinese government.

The theft of documents has been characterized by senior U.S. officials as political espionage intended to identify spies and people who might be recruited as spies or blackmailed to provide useful information.

Because the OPM records contained the background checks of State Department employees, officials privately said the Chinese could have compared those records with the list of embassy personnel. Anybody not on that list could be a CIA officer.

The CIA’s move was meant to safeguard officers whose agency affiliation might be discovered as a result of the hack, said officials, who spoke on the condition of anonymity to discuss a sensitive matter.

The CIA declined to comment.

The disclosure comes as senior defense and intelligence officials on Tuesday tried – not always successfully – to explain to a committee of frustrated lawmakers their policy on deterring foreign governments, such as China, from carrying out cyber-intrusions.

Director of National Intelligence James R. Clapper Jr., testifying before the Senate Armed Services Committee, sought to make a distinction between the OPM hacks and cybertheft of U.S. companies’ secrets to benefit another country’s industry. What happened in OPM case, “as egregious as it was,” Clapper said, was not an attack: “Rather, it would be a form of theft or espionage.”

And, he said, “we, too, practice cyberespionage and … we’re not bad at it.” He suggested that the United States would not be wise to seek to punish another country for something its own intelligence services do. “I think it’s a good idea to at least think about the old saw about people who live in glass houses shouldn’t throw rocks.”

That drew a sharp response from Sen. John McCain, R-Ariz., the committee’s chairman. “So it’s okay for them to steal our secrets that are most important because we live in a glass house? That is astounding.”

Clapper protested that he did not say it was a good thing. “I’m just saying that both nations engage in this,” he said, referring to China and the United States.

Several lawmakers were not satisfied with the lack of a punishment for the OPM theft, despite Clapper’s explanation.

“This is a pretty significant issue that is going to impact millions of Americans,” said Sen. Kelly Ayotte, R-N.H. “But it seems to me they are not seeing a response right now from us, and therefore we’re going to continue to see bad behavior from the Chinese.”

At another point in the hearing, Deputy Defense Secretary Robert O. Work seemed to stray off-message when he asked what response he would recommend if the Chinese were to carry off another OPM-like cybertheft.

“Sanctions? Retaliation?” asked Sen. Dan Sullivan, R-Alaska.

“Could be any of those, Senator. Maybe all of the above,” Work responded.

In fact, largely because of the concerns that Clapper outlined, it is unlikely that the administration would impose sanctions or retaliate overtly for the OPM intrusions.

During the Cold War, Sen. Martin Heinrich, D-N.M., noted, a foreign agent who was nabbed trying to steal U.S. secrets would be kicked out of the country if he or she had diplomatic cover or thrown in jail otherwise.

In the OPM breach, he said, “the U.S. government seems uncertain about what a proportioned response would look like.”

The counterintelligence risks of the OPM breach are significant, Clapper said. He noted that the intelligence agencies do not know specifically whose records were taken. But the scale of the compromise – more than 22 million individuals’ records breached – “has very serious implications … from the standpoint of the intelligence community and the potential for identifying people” who may be undercover.

“Unfortunately,” he said, “this is a gift that’s going to keep on giving for years.”

Talk to us

> Give us your news tips.

> Send us a letter to the editor.

> More Herald contact information.

More in Local News

People fish from the pier, hold hands on the beach and steer a swamped canoe in the water as the sun sets on another day at Kayak Point on Monday, June 12, 2023, in Stanwood, Washington. (Ryan Berry / The Herald)
Kayak Point Park construction to resume

Improvements began in 2023, with phase one completed in 2024. Phase two will begin on Feb. 17.

Everett
Everett to pilot new districtwide neighborhood meetings

Neighborhoods will still hold regular meetings, but regular visits from the mayor, city council members and police chief will take place at larger districtwide events.

A truck drives west along Casino Road past a new speed camera set up near Horizon Elementary on Wednesday, May 8, 2024 in Everett, Washington. (Olivia Vanni / The Herald)
Crashes, speeding down near Everett traffic cameras

Data shared by the city showed that crashes have declined near its red light cameras and speeds have decreased near its speeding cameras.

Community Transit is considering buying the Goodwill Outlet on Casino Road, shown here on Tuesday, Jan. 6, 2026 in Everett, Washington. (Will Geschke / The Herald)
Community Transit to pay $25.4M for Everett Goodwill property

The south Everett Goodwill outlet will remain open for three more years per a proposed lease agreement.

Logo for news use featuring Snohomish County, Washington. 220118
Parent support collaborative worries money will run out

If funding runs out, Homeward House won’t be able to support parents facing drug use disorders and poverty.

Carlos Cerrato, owner of Taqueria El Coyote, outside of his food truck on Thursday, Jan. 29, 2026 in Lynnwood. (Olivia Vanni / The Herald)
Everett proposes law to help close unpermitted food carts

The ordinance would make it a misdemeanor to operate food stands without a permit, in an attempt to curb the spread of the stands officials say can be dangerous.

An Everett Transit bus drives away from Mall Station on Monday, Dec. 22, 2025, in Everett, Washington. (Olivia Vanni / The Herald)
Everett Transit releases draft of long-range plan

The document outlines a potential 25% increase in bus service through 2045 if voters approve future 0.3% sales tax increase.

Lake Stevens robotics team 8931R (Arsenic) Colwyn Roberts, Riley Walrod, Corbin Kingston and Chris Rapues with their current robot and awards on Thursday, Jan. 29, 2026 in Lake Stevens, Washington. (Olivia Vanni / The Herald)
Lake Stevens robotics team receives world recognition

Team Arsenic took second place at the recent ROBO-BASH in Bellingham, earning fifth place in the world.

Leslie Wall in the Everett Animal Shelter on Jan. 6, 2026 in Everett, Washington. (Will Geschke / The Herald)
Everett Animal Shelter gets $75k in grants, donations

The funds will help pay for fostering and behavioral interventions for nearly 200 dogs, among other needs.

Everett
One man was injured in Friday morning stabbing

Just before 1 a.m., Everett police responded to a report of a stabbing in the 2600 block of Wetmore Avenue.

x
Paraeducator at 2 Edmonds schools arrested on suspicion of child sex abuse

On Monday, Edmonds police arrested the 46-year-old after a student’s parents found inappropriate messages on their daughter’s phone.

North Seattle Chinese Dancers perform a ribbon dance during the City of Mukilteo’s Lunar New Year Celebration on Thursday, Feb. 12, 2026 in Mukilteo, Washington. (Olivia Vanni / The Herald)
Mukilteo celebrates Lunar New Year with food, dancing

Hundreds pack into the Rosehill Community Center to celebrate the Year of the Horse.

Support local journalism

If you value local news, make a gift now to support the trusted journalism you get in The Daily Herald. Donations processed in this system are not tax deductible.