On April 26, 2026, the Italian government officially decided to extradite Xu Zewei, a Chinese national who is wanted by US authorities for his alleged involvement in cyber crimes, including the theft of crucial COVID-19 research. This decision comes after an Italian court ruled in favor of the extradition earlier this month.

Xu, who was arrested in Milan on July 3, 2025, has been indicted by the US Department of Justice on several charges, including wire fraud and aggravated identity theft. The allegations suggest he played a role in a series of computer intrusions executed at the behest of the Chinese government and targeted various American institutions during the pandemic.

According to the US authorities, Xu is associated with Hafnium, a group linked to numerous high-profile cyber espionage campaigns that aimed to exploit vulnerabilities in Microsoft Exchange servers, affecting thousands of computers worldwide. The indictment indicates that Xu was actively involved in hacking operations primarily between February 2020 and June 2021.

While Xu's lawyer, Enrico Giarda, has stated that his client has not yet been formally notified of the extradition, the Italian government's decision marks a significant step in a growing international response to cyber crimes linked to state-sponsored hacking.

The extradition reflects increasing cooperation between the US and European nations in combating cyber threats that have intensified amid geopolitical tensions. As Xu prepares for the extradition, his case is likely to further highlight the complex interplay between international law, cybersecurity, and diplomatic relations.