Former Verizon employee sentenced to four years for sharing cyber secrets with Chinese government

A former Verizon IT worker residing in Florida was sentenced to four years in federal prison on Monday for his involvement in a long-running scheme to provide sensitive information to China’s Ministry of State Security (MSS). Ping Li, 59, pleaded guilty to conspiring to act as an agent for the Chinese government, in addition to facing a $250,000 fine.

According to the Department of Justice, Li’s illicit activities date back to at least 2012. Over this period, he funneled classified data to the MSS, China’s civilian intelligence agency, while working in the U.S. technology sector. Li shared information about Chinese dissidents, pro-democracy advocates, members of the Falun Gong religious movement, and sensitive cybersecurity details.

Li had a 20-year career at Verizon before joining Infosys, an Indian IT giant. Prosecutors revealed that he served as a “cooperative contact” for MSS operatives, responding to their requests with alarming efficiency. In one instance from May 2021, Li provided detailed information about hacking incidents targeting U.S. companies just four days after an MSS officer requested it.

The extent of the leaks was staggering. Court documents highlighted that Li provided MSS officers with insights into hacking tactics, training materials, and internal cybersecurity protocols from his employers. Among the targeted information was data related to the 2021 SolarWinds cyberattack on U.S. government systems.

Prosecutors also revealed that Li used anonymous email accounts to transmit data and made multiple trips to China to meet with MSS handlers. His collaboration extended to sharing biographical details about Chinese dissidents, including a Falun Gong practitioner in Florida, and reporting on individuals who had fled China for the U.S.

Li’s covert activities came to light following an arrest on July 20, 2022. Initially denying the allegations, he confessed when confronted with email evidence linking him to MSS officers. He admitted to leaking internal cybersecurity documents that he was explicitly forbidden to share.

Li’s sentencing includes a four-year prison term followed by three years of supervised release, underscoring the gravity of his actions and the potential risks posed to U.S. cybersecurity and individual privacy.