Four members of the Chinese military are under suspicion for the 2017 Equifax breach.

In 2017, consumer credit agency Equifax was hacked by an unknown culprit. The breach exposed the private information of nearly 150 million Americans, and forced Equifax to pay several hundred million dollars in settlements with customers and the FTC. Now, three years later, the US Department of Justice has pinned the blame for the breach on four particular individuals: Wu Zhiyong, Wang Qian, Xu Kei and Liu Lei. All four men are allegedly members of the People’s Liberation Army, China’s military force.

According to the DOJ’s report, the four men broke into an Equifax database through a portal over the course of several weeks. Once inside the database, they made over 9,000 informational queries to obtain names, social security numbers, and more from US citizens. In addition to this crime, the four have also been charged with attempted theft of Equifax trade secrets. This includes things like database designs and data structure. The defendants went to great lengths to cover their tracks after committing these crimes, routing their web traffic through 34 different proxy servers located in 20 different countries.

“This was a deliberate and sweeping intrusion into the private information of the American people,” attorney general William Barr said on the matter. “Today, we hold PLA hackers accountable for their criminal actions, and we remind the Chinese government that we have the capability to remove the internet’s cloak of anonymity and find the hackers that nation repeatedly deploys against us. Unfortunately, the Equifax hack fits a disturbing and unacceptable pattern of state-sponsored computer intrusions and thefts by China.”