Italy extradition of Xu Zewei to U.S. approved

Italy has approved the extradition of Chinese national Xu Zewei to the United States, where he is expected to face hacking-related charges that include the alleged theft of COVID-19 medical research. The decision was taken on April 26, following an Italian court ruling earlier in April that found Xu eligible to be sent to U.S. jurisdiction.

 

U.S. authorities arrested Xu in Milan on July 3, 2025. The case centers on charges of wire fraud and aggravated identity theft, according to U.S. authorities. The Italian government has declined to comment on the extradition decision.

 

The U.S. Justice Department alleges Xu took part in computer piracy from February 2020 through June 2021. Officials say the activity targeted U.S.-based universities as well as immunologists and virologists working on research tied to COVID-19 vaccines, treatments, and testing. The allegations place the claimed conduct during a period when pandemic-related research was a high-value target for cyber intrusions, given its scientific and public-health importance.

 

U.S. authorities also claim Xu was connected in 2021 to the Hafnium cyber-espionage group. The Justice Department has said Hafnium infiltrated thousands of computers globally, framing the allegations as part of a wider set of intrusions beyond the United States. The claims, as presented by U.S. officials, link the case to broader concerns about cross-border cyber activity affecting institutions and networks in multiple countries.

 

Xu’s lawyer, Enrico Giarda, said his client had not yet received official communication about the Italian government’s decision. In earlier proceedings after the arrest, the defense argued that Xu had been misidentified. No additional details were provided by Italian authorities, and officials in Italy have not offered public comment on the matter.

 

The extradition approval underscores how cyber cases can move through multiple legal systems, with arrests and court decisions in one country enabling prosecution in another. It also highlights the intersection of cybersecurity, scientific research, and international law enforcement cooperation, particularly when alleged targets include universities and medical researchers.

The next steps will depend on the formal notification process and the completion of extradition procedures under Italy’s legal framework.