Enter your email to read this article
Read news on any topic, in one place, from publishers like The Economist, FT, Bloomberg and more.

Hacker claims to have stolen 1 billion records of Chinese citizens from police

A hacker has claimed to have procured a trove of personal information from the Shanghai police on one billion Chinese citizens, which tech experts say, if true, would be one of the biggest data breaches in history.

The anonymous internet user, identified as "ChinaDan", posted on hacker forum Breach Forums last week offering to sell the more than 23 terabytes (TB) of data for 10 bitcoin, equivalent to about $200,000.

"In 2022, the Shanghai National Police (SHGA) database was leaked. This database contains many TB of data and information on Billions of Chinese citizen," the post said.

"Databases contain information on 1 Billion Chinese national residents and several billion case records, including: name, address, birthplace, national ID number, mobile number, all crime/case details."

Reuters was unable to verify the authenticity of the post.

The Shanghai government and police department did not respond to requests for comment on Monday.

Reuters was also unable to reach the self-proclaimed hacker, “ChinaDan”, but the post was widely discussed on China’s Weibo and WeChat social media platforms over the weekend with many users worried it could be real.

The hashtag "data leak" was blocked on Weibo by Sunday afternoon.

Kendra Schaefer, head of tech policy research at Beijing-based consultancy Trivium China, said in a post on Twitter it was "hard to parse truth from rumour mill".

If the material the hacker claimed to have came from the Ministry of Public Security, it would be bad for "a number of reasons", Schaefer said.

"Most obviously it would be among biggest and worst breaches in history," she said.

Zhao Changpeng, CEO of Binance, said on Monday the cryptocurrency exchange had stepped up user verification processes after the exchange's threat intelligence detected the sale of records belonging to 1 billion residents of an Asian country on the dark web.

He said on Twitter that a leak could have happened due to "a bug in an Elastic Search deployment by a (government) agency", without saying if he was referring to the Shanghai police case. He did not immediately respond to a request for further comment.

The claim of a hack comes as China has vowed to improve protection of online user data privacy, instructing its tech giants to ensure safer storage after public complaints about mismanagement and misuse.

Last year, China passed new laws governing how personal information and data generated within its borders should be handled.

Related Stories
Hacker Claims to Have Stolen 1 Bln Records of Chinese Citizens from Police
A hacker has claimed to have procured a trove of personal information from the Shanghai police on one billion Chinese citizens, which tech experts say, if true, would be one of the biggest data breaches in history. The anonymous internet user, identified as "ChinaDan", posted on hacker forum Breach Forums…
From analysis to the latest developments in health, read the most diverse news in one place.
Hacker claims he has stolen data on a billion people from Shanghai police
A hacker claims to have procured a trove of personal information from the Shanghai police on a billion Chinese citizens, which tech experts say, if true, would be one of the biggest data breaches in history.
Alleged Chinese police database hack leaks data of 1 billion
Hackers claim to have obtained a trove of data on 1 billion Chinese from a Shanghai police database in a leak that, if confirmed, could be one of the largest data breaches in history
Hackers offer data on 1 billion Chinese after alleged leak
Experts say alleged leak from Shanghai police database could be among largest data breaches in history.
Read Alibaba's Role In Shanghai's Recent Infamous Police Database Hack As China Struggles To Censor Breach News
China has rapidly censored news of the alleged hacking of a Shanghai police database, potentially compromising the personal data of more than one billion people, the Financial Times reports.&nbs
One place to find news on any topic, from hundreds of sites.
Hacker claims major Chinese citizens' data theft
Beijing (AFP) - A hacker claiming to have stolen personal data from hundreds of millions of Chinese citizens is now selling the information online.