National Security
3:03 am
Tue May 7, 2013

U.S. Turns Up Heat On Costly Commercial Cybertheft In China

Originally published on Wed May 8, 2013 1:04 pm

American companies that do business with China make good money. They also lose a lot of money there to cyberthieves, who routinely hack into the computers of the U.S. firms and steal their trade and technology secrets.

China's theft of U.S. intellectual property has gotten serious enough in recent months to warrant President Obama's attention and prompt a series of visits to Beijing by senior members of Obama's Cabinet. A new Pentagon report on Chinese military developments adds to the U.S. complaints. The report says some computer intrusions carried out by hackers in China "appear to be attributable directly to the Chinese government and military."

A recent survey by the American Chamber of Commerce in China, which represents more than a thousand U.S. businesses there, turned up widespread concern about the loss of intellectual property. Twenty-six percent of those responding to the survey reported somebody stealing business data from their computers, and 42 percent said the problem is getting worse.

"They know they're under attack," says Greg Gilligan, the group's chairman. "They just don't know who's attacking."

The problem of data theft is well-known among U.S. companies operating in China. American businessmen have long complained that their laptops are hacked, their emails intercepted, and their technology and negotiation plans compromised. But with more than a billion Chinese as potential customers for American goods, the temptation to do business with China has been irresistible.

"For the last 15 or 20 years, companies have been willing to make the bet," says Adam Segal, a China expert at the Council on Foreign Relations. "[Their attitude is] 'We know we're going to lose our technology in China, but being in the China market is so important that we're going to take that bet.' "

Organized Effort To Target U.S. Firms

The U.S. cybersecurity firm Mandiant identified a cyber unit of China's People's Liberation Army as the likely culprit behind much of the industrial espionage directed against U.S. companies. Mandiant researchers said the PLA unit is systematically taking intellectual property — technology blueprints, manufacturing secrets, negotiation plans — from the U.S. companies it targets.

The Mandiant finding certainly caught the attention of Gilligan, a leader among U.S. businesses operating in China.

"The salient point of that report was [the statement] that there is some organized effort by some group attacking business interests," Gilligan says. "This is not government to government. It's not military to military. It's [someone] attacking the economic interests of United States companies."

A classified National Intelligence Estimate earlier this year concluded that cyber-espionage from China is now threatening U.S. economic competitiveness. The concern is that if Chinese businesses can steal U.S. technology, they can blunt the one big advantage U.S. companies have in the global economy, which is their capacity to innovate. It is that spirit that explains the emergence of U.S. companies like Microsoft, Apple or Google.

Such companies, business experts say, have been far less likely to originate in China, because the business culture in China does not favor creativity. But they can always steal the products of U.S. creativity.

"There are certainly some companies that are seeing [intellectual property theft] as part of a strategy for becoming more competitive internationally, taking innovation from somewhere else and incorporating it in their products," says Robert Hormats, the U.S. undersecretary of state for economic growth, energy and the environment.

"We want to make the Chinese know that we regard this as a threat to our most innovative companies, and are very serious about insisting that they stop it. Because if this lasts too long, a lot of innovation is gone from American companies," Hormats says.

Turning Up The Pressure

The United States and China cooperate in some important areas, such as energy and environmental issues. Cybersecurity, Hormats says, is not one of those areas.

"This is an area that damages the relationship and undermines confidence," Hormats says. "In fact, this has become a major source of mistrust in the relationship."

Chinese authorities say they are as much a victim of cyberattacks as U.S. firms are, and they deny that there is a state policy of industrial espionage. But U.S. officials aren't convinced.

In March, President Obama's national security adviser, Tom Donilon, warned of "serious concerns about sophisticated, targeted theft of confidential business information and proprietary technologies through cyber-intrusions emanating from China on an unprecedented scale," and he called on China to "take serious steps" to investigate and halt such activities.

A few days later, Obama made that same request in an introductory phone call to China's new president, Xi Jinping. Later that month, Treasury Secretary Jacob Lew raised the cybersecurity issue during a visit in Beijing. He was followed in April by Secretary of State John Kerry and the chairman of the joint chiefs, Army Gen. Martin Dempsey.

Undersecretary Hormats also visited the Chinese capital. His message reinforced what other senior U.S. officials were saying: The United States is running out of patience and wants China to end its cyber-espionage now.

"Having a prolonged dialogue is not our goal," Hormats says. "A dialogue that leads to results, that's our goal."

If the cyber-espionage continues, Hormats says, the Obama administration will consider possible punitive actions.

"We're having discussions within our government to figure out how to respond," he says. "Our hope is that the Chinese will take action, but we're certainly considering various options that we will take if that doesn't work."

Will Losses Ultimately Outweigh Profits?

The Obama administration has already signaled that it will step up the investigation and prosecution of trade-secret theft when the parties responsible can be identified and held accountable. Attorney General Eric Holder listed several such cases during a White House event in February. Each of the examples he highlighted involved a loss of intellectual property to China.

Some hawkish members of Congress want to deny U.S. visas to anyone in China found to be stealing economic secrets. That would hurt Chinese who want their children educated in U.S. universities. Congress could also punish China by imposing new trade restrictions.

If all else fails, and Chinese cyberwarriors continue to steal secrets from American companies, the U.S. military's Cyber Command could intervene in defense of the targeted U.S. firms, hacking back into the Chinese computers and deleting the stolen data.

So far, virtually no one in the U.S. government is ready to endorse that approach, although the "offensive" option is favored by some private cybersecurity firms.

Segal at the Council on Foreign Relations can imagine a point where U.S. companies in China are so penetrated and have lost so many of their secrets to their Chinese rivals that they no longer have an advantage in the Chinese market and simply call it quits.

"Either the Chinese catch the U.S. companies [in innovations], or the cost from the theft becomes so burdensome that the U.S. companies decide that it's not worth it any longer," Segal says.

The situation is not yet that bad. In fact, the American warnings may have had at least a temporary effect. Security sources say the Chinese army unit most associated with cyber-espionage backed off a bit after the high-level U.S. visits to Beijing.

Copyright 2013 NPR. To see more, visit http://www.npr.org/.

Transcript

DAVID GREENE, HOST:

The Pentagon has officially accused the Chinese government of breaking into U.S. computer systems, to steal technology that its own companies have not yet developed. This charge came in an annual report to Congress on Chinese military developments that was released yesterday.

This problem of cyber-espionage has lately risen to the top of the U.S. agenda with China. U.S. officials say China is relying on theft to modernize its military, and to develop its industrial base. Private U.S. businesses are among the victims; and they're losing valuable trade and technology secrets, as NPR's Tom Gjelten reports.

TOM GJELTEN, BYLINE: The stories from American businessmen dealing with China are endless - laptops compromised, emails intercepted, blueprints stolen. A recent survey by the American Chamber of Commerce in China found that 1 out of 4 U.S. companies there reported somebody stealing data from their computers. Greg Gilligan is the chamber chairman.

GREG GILLIGAN: They know they're under attack. They just don't know who's attacking.

GJELTEN: Yesterday's Pentagon report suggests a possible answer. Some computer intrusions, it says, quote, "appear to be attributable directly to the Chinese government and military." Another report last February, from the cybersecurity firm Mandiant, went further, saying a cyber unit of the Chinese army is systematically taking intellectual property - that would include technology blueprints, manufacturing secrets or negotiation plans - from the U.S. companies it targets.

Much of this is above and beyond China stealing military secrets. Greg Gilligan says if true, it's even more alarming than traditional government-on-government espionage.

GILLIGAN: Some organized effort by some group that is attacking business interests. So this is not government to government; it's not military to military. It's attacking economic interests of United States companies.

GJELTEN: U.S. companies have long known it's risky to do business in China. But there is that huge opportunity - more than a billion Chinese ready to buy American goods. Adam Segal, a China expert at the Council on Foreign Relations, says the business temptation has so far been irresistible, no matter the likelihood of being hacked.

ADAM SEGAL: For the last 15, 20 years, companies have been willing to make the bet or the bargain that oh yes, we know we're going to lose our technology in China, but being in the China market is so important that we're going to take that bet.

GJELTEN: But the odds are getting worse. A classified National Intelligence Estimate earlier this year concluded that cyber-espionage from China is now threatening U.S. economic competitiveness. Here's why - the one big advantage that U.S. companies have in the global economy is they are inventive and creative. It's no accident that companies like Microsoft, Apple or Google originated in the United States, not in China. The business culture in China does not favor creativity. The Chinese cannot match U.S. technological innovation. But Undersecretary of State Robert Hormats says Chinese companies can get around that U.S. advantage by stealing U.S. ideas and technology.

ROBERT HORMATS: There are certainly some companies that are seeing this as part of a strategy for becoming more competitive internationally, taking innovation from somewhere else and incorporating it in their products. We want to make the Chinese know that we regard this as a threat to our most innovative companies, and are very serious about insisting that they stop it.

GJELTEN: Chinese authorities deny there is a state policy of cyber-espionage. But U.S. officials aren't buying it. Yesterday's Pentagon report is only the latest example of U.S. government complaints about Chinese cyber-espionage. President Obama raised concerns in a phone call in March, to China's president. Next came a parade of senior U.S. officials in Beijing, complaining in person - the secretary of the treasury, the secretary of state, the chairman of the joint chiefs.

Robert Hormats was also there. The message: The U.S. is running out of patience, and wants China to end its cyber-espionage now.

HORMATS: Having a prolonged dialogue is not our goal. A dialogue that leads to results - that's our goal.

GJELTEN: And you told them that?

HORMATS: Yes.

GJELTEN: Quick results, or else what?

HORMATS: Well, we're trying to figure out what we can do. We're having discussions within our government, to figure out how to respond. Our hope is that the Chinese will take action, but we're certainly considering various options that we will take if that doesn't work.

GJELTEN: One option: Identify the individual Chinese who are stealing business secrets and if possible, prosecute them. Attorney General Eric Holder highlighted several such cases at a White House event in February.

(SOUNDBITE OF ARCHIVED AUDIO)

ERIC HOLDER: Last September in New Jersey, a jury convicted another Chinese native of trade-secret theft and other charges, for stealing information from...

GJELTEN: Another option: Deny U.S. visas to anyone in China found to be stealing economic secrets. That would hurt Chinese who want their children educated in U.S. universities. Congress could also punish China by imposing new trade restrictions. Finally, if all else fails and Chinese cyberwarriors continue to steal secrets from American companies, the U.S. military's Cyber Command could intervene in defense of the targeted U.S. firms, hacking back into the Chinese computers and taking their data.

So far, virtually no one in the U.S. government is ready to endorse that approach. But Adam Segal, at the Council on Foreign Relations, can imagine a point where U.S. companies in China are so penetrated, and have lost so many of their secrets to their Chinese rivals, that they no longer have an advantage in the Chinese market and simply call it quits.

SEGAL: Either the Chinese catch the U.S. companies, or the cost from the theft becomes so burdensome that the U.S. companies decide that it's not worth it any longer.

GJELTEN: In fact, the American warnings may have had at least a temporary effect. Security sources say the Chinese army unit most associated with cyber-espionage backed off a bit, following the high-level U.S. visits.

Tom Gjelten, NPR News, Washington. Transcript provided by NPR, Copyright NPR.

Related program: