Salt Typhoon hacking: FCC chair proposes cybersecurity rules in response to China’s Salt Typhoon telecom hack

US Federal Communications Commission chairwoman Jessica Rosenworcel is proposing that communications service providers be required to submit an annual certification attesting that they have a plan in place to protect against cyberattacks, the agency said in a statement on Thursday.

The proposal is in part in response to efforts by an allegedly Beijing-sponsored group of hackers, dubbed “Salt Typhoon,” to burrow deep into American telecommunications companies to steal data about US calls. “While the Commission’s counterparts in the intelligence community are determining the scope and impact of the Salt Typhoon attack, we need to put in place a modern framework to help companies secure their networks and better prevent and respond to cyberattacks in the future,” Rosenworcel said in a statement.

Salt Typhoon’s sweeping espionage campaign has been the subject of increasing concern across Washington, and Rosenworcel’s announcement follows a day after US government agencies held a classified briefing for all senators on the hacking.

In parallel, a senior US official told journalists Wednesday that “a large number of Americans’ metadata” had been stolen by the hackers, who had broken into “at least” eight telecommunications and telecom infrastructure firms in the United States.

Rosenworcel said the proposal was being circulated to other commissioners in her agency and, if adopted, would take effect immediately. A message seeking comment from commissioner Brendan Carr, who President-elect Donald Trump has chosen to replace Rosenworcel at the FCC, was not immediately returned.

Representatives for major telecom companies including Verizon, AT&T, and T-Mobile did not immediately return a message seeking comment.