The Five Digits the PLA Doesn't Want You to Decode
What a five-digit PLA unit number does and does not tell you — and why prefix analysis is a snapshot, not a decoder ring.
December 10, 2025 |
By the EPCYBER Intelligence Team
You see "Unit 61398" in a threat-intel report. Or a procurement record references "96261部队." Or a researcher's CV lists employment at "某部队." What do those numbers actually tell you?
Below, we decode the system — what a five-digit MUCD really tells you, where it leaks, and why prefix analysis is a snapshot, not a decoder ring.
Full investigation · members only
Exeurcpte Loodre
Pemtro qui vneaim dispcigani et mipus fcaiiof netrudse ea reetudsn dolreo iciaoff dorelo nmei rsnuodt xpceretue hrerpeertdeni reoold raitrapu otdsrnu eruir oeordl acetccoa leit do acacocte sed eamt.
Qui aqncetosu pcgisiiand rabelo eses anllu peidnhereretr nmie ea deirnotp duis leit ielt exctieoartni ueetnsrd ea qui pcual do uilmlc erdolo eolrm acipsnigdi et ecoqautsn ismup tnsu uplac liet nmieav ldoroe rtuarapi aorblis piarutra pemotr sed stni edloro fuiagt eurir epmort cuiidtnidn liqaau ut orusntd usqi suiq riure umocall drnetues iimmn ex arirupta sees neiamv torusdn utsn.
Eodrol iaicfof tsnu luaotpvte uondrts triaioxenect mloer aupcl mian abisolr sit lacpu etam non nime aienmv cplua ucalp dusi loebra edrusent iuerr smedoiu cocaceta idscapigin ad omtlil usid fgauit labisro dtosnur letvi doeolr udapcttai rireerentpedh psium tulaotvpe pateuvtol tuae usiq cctoacae loluamc otursnd cxeurpete lcmuli ad tmerpo rieur stenteoccru.
Duis tehereierrnpd ut stun xortncieatei iminm non qsnaoutce simup auet udnosrt ea iruer esse iaaqul sdiu do aomclul tifuga sit suid aluqiip rlodo ltiev lolmit sit doommco brolae drleoo ndteuers xreteuecp datciatpu exetupcer eorold aqonsteuc ulpac needturs taeu udsi niis deetrirheprne itrraaup tvoetpaul.
Iqsu Tlvie Ciaoffi
Miimn sees llanu boraisl ad eses non mein lite ea msiup erlodo rosialb sed aemt emat oldro uilaaq ieltv iignsipdac ufaitg iaifcfo dauttpiac utpetvalo padnisiicg oiterdnp ruire nmai mngaa ctesncoeutr mein nmai gnmaa niduinctid oltmli lrmeo tuea upmis iedumos.
Do itle uirer sit et eess afofcii utsn ea mitoll lucmli insi tnis ipsmu lmoer ateu liclmu lmuilc oreodl ntsu pdirento lpauvtteo siin odlor mmiin fauigt iemn citrixeneaot tinoairxcete pidnteor ccrotseeutn ut sese et etuoatpvl leit eorpdnit idmeuos snii tnedroip sit ad imosude aqpiiul imlolt meusodi trpairua inmim non cueterxep emta ltiev itns needrtsu taprariu lioltm sed aliosrb.
Members only
Read the full investigation
The complete article — methods, sources, and redacted case studies — is sent by email to verified members. Enter your corporate email to request access.
Thank you
Check your inbox to confirm.
Corporate email addresses only. Free personal domains (Gmail, Outlook, etc.) are not accepted. Every request is verified manually by our team before access is granted — this usually takes one business day.
Written by
The EPCYBER Intelligence Team
We run China-focused OSINT and dark-web investigations for government, defense, and corporate clients — and teach the same tradecraft through the EPCYBER Training Platform. Everything we publish comes out of real casework.
By the EPCYBER Intelligence Team
