One of the two incidents dates back to August 2024, when a Chinese advanced materials design and research institution was targeted in a suspected cyberattack by US intelligence agencies.
Both sources are from Chinese state-owned media. I give zero credibility to that.
It’s important to understand it’s not just them hacking us but literally everyone with the capability is doing this to everybody else.
There are no friends in the realm of foreign intelligence services/espionage.
Also sometimes allies “audit” each other. So US can be permissibly hacked by the UK and vice versa as an example. They have terms and rules of engagement.
Same with Russia-China and so on…