Lawmakers are urging Navy Exchange officials to stop selling Lenovo computers and other products, because of their reported links to the People’s Republic of China government.
“The exchange should not be selling Lenovo products to U.S. service members, let alone incentivizing such purchases with tax-free, discounted prices,” stated lawmakers on the House Select Committee on the Chinese Communist Party, in a letter to Navy Exchange Service Command CEO Robert Bianchi, dated Oct. 4.
They asked for a briefing to the Select Committee no later than Oct. 20, to explain why the Navy Exchange decided to sell these items. “Lenovo is closely affiliated with the People’s Liberation Army, the Chinese Academy of Sciences, and the [People’s Republic of China] government,” stated the letter, signed by Rep. Mike Gallagher, R-Wisconsin.
The People’s Republic of China espionage campaigns “are highly sophisticated and could certainly target U.S. service members on their personal computer and IT devices,” the lawmakers wrote.
All eligible shoppers can buy from the Navy Exchange, regardless of branch of service.
A quick check of the Navy Exchange website shows nine Lenovo laptops and one desktop computer for sale. Information was not immediately available from Navy Exchange officials on the number of products sold in stores, or the volume of sales. A response to the lawmakers’ concerns was not available by publication time.
Lenovo officials didn’t immediately respond to questions about the lawmakers’ concerns by publication time.
“[Lenovo’s] links to state-run cyberespionage campaigns are well documented, and it is believed to have been complicit in installing Superfish spyware and potentially a BIOS backdoor on a number of its computer products,” the lawmakers stated, quoting a 2018 report from the U.S.-China Economic and Security Review Commission. BIOS is the basic input/output system.
According to that report, “the Chinese government, through Legend Holdings Limited, is the largest shareholder of Lenovo stock.”
“We are concerned that these actors could gain access to service members’ sensitive personal information and exploit this access to compromise U.S. national security.”
RELATED
They cited a number of sources of concern, including a 2018 Federal Trade Commission complaint against Lenovo for preinstalling software that “created serious security vulnerabilities.” As part of a 2018 settlement with the FTC, Lenovo has been prohibited from misrepresenting any software features that are preloaded on laptops that will inject advertising into consumers’ internet browsing or transmit sensitive consumer information to third parties. In addition, Lenovo was required for 20 years to implement a software security program for most consumer software preloaded on its laptops.
The Defense Department spent at least $32.8 million in fiscal 2018 on technology that could threaten national security, according to a 2019 DoD Inspector General report. Among those cited were 1,573 Lenovo products totaling over $2 million. Congress and the Department of Homeland Security issued multiple warnings against using Lenovo computers, according to the report. The IG investigators noted that these had “known cybersecurity vulnerabilities in FY 2018.”
Meanwhile, House lawmakers have approved a provision in the fiscal 2024 National Defense Authorization legislation that would ban the sale of all goods in commissaries and exchanges that are made in China, assembled in China, or imported into the United States from China. The Senate’s version doesn’t have a similar provision; House and Senate lawmakers are hashing out their differences.
Karen has covered military families, quality of life and consumer issues for Military Times for more than 30 years, and is co-author of a chapter on media coverage of military families in the book “A Battle Plan for Supporting Military Families.” She previously worked for newspapers in Guam, Norfolk, Jacksonville, Fla., and Athens, Ga.