San Francisco: At least six US states have been targeted by hackers linked to China who exploited vulnerabilities in web programs, cybersecurity company Mandiant said on Wednesday.