The Chinese ministry said it found evidence tracing stolen data and credentials as far back as 2022, which were used to spy on the staff's mobile devices.