白宫国家安全备忘录援引解密的“绝密”情报称阿里巴巴向中国人民解放军提供面向美国目标的技术支持，并向政府与军方开放客户数据，包括 IP 地址、WiFi 信息、支付记录及多种 AI 服务，同时员工被指曾向解放军传递“零日漏洞”知识。该文件日期为 11 月 1 日，紧随特朗普与习近平在韩国会晤并达成一年的贸易缓和协议。阿里巴巴对此予以否认，称指控“完全是无稽之谈”。
备忘录反映美国对中国云服务与 AI 能力的担忧增大，与今年情报总监办公室的评估一致：包括“Salt Typhoon”在内的中国网络行动展现“能力广度与深度”急剧扩张，可在危机中用于破坏美方基础设施。美国官员称政府正“日以继夜”缓解利用“不受信任供应商”实施的网络入侵风险。国会层面，5 月有议员要求 SEC 将 25 家中国企业（含阿里巴巴）摘牌，理由是“军民融合”使其须向解放军共享技术。
前 CIA 中国分析主管称解放军网络渗透规模已达“前所未有”，每日攻击美国机场、港口及太平洋与本土关键节点，旨在为“系统摧毁战”做准备。英方战略评估撰写者指出全球军队正高度依赖私营科技企业的云服务与研发。中国使馆则反驳美国“完全歪曲事实”，称从未要求海外企业违法提供本地数据。
A White House national security memo citing declassified “top secret” intelligence alleges that Alibaba provides the PLA with tech support for “operations” targeting the US, including access to customer IP addresses, WiFi details, payment records and AI services, and that employees shared knowledge of zero-day exploits. The memo, dated November 1, followed Trump’s meeting with Xi in South Korea and a one-year trade truce. Alibaba rejected the allegations as “complete nonsense.”
The memo aligns with rising US concerns over Chinese cloud and AI capabilities. The Office of the Director of National Intelligence warned in March that Chinese campaigns, including the “Salt Typhoon” penetration of US telecom networks, demonstrate rapidly expanding “breadth and depth” and could be used to disrupt US infrastructure in conflict. US officials said they are working “day and night” to counter intrusions using “untrusted vendors.” In May, lawmakers urged the SEC to delist 25 Chinese firms, including Alibaba, citing “military-civil fusion” obligations to share technology with the PLA.
Former CIA China analysts describe PLA cyber operations as “unprecedented,” with daily intrusions against US airports, seaports and Pacific and domestic logistics nodes aimed at preparing for “system destruction warfare.” Defense experts note global militaries’ growing reliance on private tech firms for cloud and R&D. China’s embassy denied the claims as a “complete distortion of facts,” asserting it has never required companies to provide overseas data in violation of local laws.