FBI Says Salt Typhoon Reached 200 Companies Across 80 Countries

The FBI stated in August 2025 that the campaign had targeted at least 200 companies across more than 80 countries, and that targeting extended beyond telecommunications into government, transportation, lodging and military networks.

The campaign entered public awareness as an intrusion into nine US carriers. Eight months later the confirmed figure is 200 organisations in 80 countries.

That is not primarily a story about the campaign expanding. It is a story about investigative reach expanding — the first figure described what US investigators had examined, not what had happened. This desk files the same correction at 26-0512 and 26-0217: early scope figures measure the investigation, and the honest reading of any of them is "at least".

Telecommunications, government, transportation, lodging and military. Lodging is the one that looks out of place, and it is not.

Hotel systems record who stayed where, when, with whom, and how they paid. Combined with transportation records and telecom metadata, they resolve the movement of specific individuals over time. Each dataset is unremarkable on its own; the intelligence value is in the join.

That is a different objective from the ones this database usually records. There is no monetisation path here and no extortion. The collection is the product — the pre-positioning and espionage logic filed at 26-0715 and 25-0611.

Eighty countries means eighty regulatory regimes, eighty notification standards and eighty national investigative bodies, coordinating through arrangements built for criminal matters rather than intelligence collection.

No single authority can compel disclosure of the whole picture. The 200 figure exists because one country’s bureau published it, and the true figure remains unknowable for structural reasons.