Unidentified individuals put up for sale a database that allegedly contains information about a billion Chinese citizens for 10 BTC (over $190,000 at the time of writing).
Sale message posted on Breach Forums. The seller claims the data came from a leak by the Shanghai Police.
The database contains information about names, addresses, places of birth, documents, phone numbers of Chinese citizens and case files. Breach Forums has blocked the message about the sale.
Several users stated that the posted data was up-to-date. If the leak is fully confirmed, it will become one of the largest in the history of the country.
CEO of the Binance exchange Changpeng Zhao said that the company discovered the sale of data on a billion residents of “one Asian country” on the dark web. He suggested that the incident occurred due to a bug in the deployment of Elastic Search by an unnamed government agency.
Our threat intelligence detected 1 billion resident records for sell in the dark web, including name, address, national id, mobile, police and medical records from one asian country. Likely due to a bug in an Elastic Search deployment by a gov agency. This has impact on …
— CZ 🔶 Binance (@cz_binance) Jul 3, 2022
Zhao added that Binance has stepped up verification measures for potentially affected users.
Bloomberg citing cybersecurity experts, writes that hackers could have accessed Shanghai police data through a “third-party cloud infrastructure partner.”
Previously unknown hackers hacked into the databases of the Xinjiang Uyghur Autonomous Region police in China and gained access to thousands of photographs of persecuted Uyghurs. Xinjiang’s “re-education camps” are said to hold about a million detainees arrested without trial, mostly Uyghurs.
In June, the non-fungible token platform OpenSea reported a leak of user data.
Stay in touch! Subscribe to World Stock Market at Telegram.