The company said individuals associated with Chinese company MoonshotAI were behind parts of the attack, but did not offer hard evidence for the claim.
The report details a Russian-aligned espionage campaign against more than 20 organizations, an exploit foundry run by Chinese undergraduates and ShinyHunters-affiliated breaches, among other disrupted operations.
A joint advisory alleges Chinese companies are using sophisticated systems to route millions of data requests to US AI models across different accounts and platforms.
WASHINGTON, DC – MARCH 24: Michael Kratsios participates in the Winning the AI Race: From Strategy to Execution panel during The Hill & Valley Forum 2026 at Andrew W. Mellon Auditorium on March 24, 2026 in Washington, DC. (Photo by Paul Morigi/Getty Images for The Hill & Valley Forum)
While distillation attacks by foreign governments and companies have real national security implications, questions around who ultimately owns the data in AI systems are fraught.