China’s recent cyber campaigns, known as Salt Typhoon, illustrate a significant transformation in intelligence gathering that prioritizes vast data collection over traditional focused spying. This shift enables Beijing to analyze entire digital ecosystems quickly, creating an intelligence advantage through what experts call “machine overmatch.”
Unlike the U.S. intelligence model, which emphasizes narrowly sourced, high-confidence insights known as “exquisite” intelligence, China leverages abundant data generated by the digital environment. Salt Typhoon targets complex, data-rich infrastructures—especially telecommunications and critical networks—rather than individual insiders, allowing China to collect operational telemetry and metadata on a massive scale.
This approach makes it possible to reconstruct communication flows, organizational ties, and vulnerabilities across entire systems. While the U.S. intelligence community also performs ecosystem mapping, it operates under strict legal constraints on data collection and use. Conversely, Chinese law mandates organizations and citizens to cooperate with intelligence activities, while its military-civil fusion strategy integrates commercial technology directly into state security goals. This reduces barriers between intelligence demands and data acquisition.
Mapping these ecosystems continuously provides Beijing with preemptive awareness that can be rapidly deployed in crises—whether armed conflict, political pressure, or diplomatic coercion. Salt Typhoon exemplifies an evolution in Chinese intelligence tradecraft, combining traditional methods with an expansive, data-centric model to outpace adversaries in processing and operationalizing actionable intelligence.