Hacker claims to have obtained data on 1 billion Chinese citizens

A hacker has claimed to have stolen the private data of 1 billion Chinese language residents from a Shanghai police database, in what would quantity to one of many largest information breaches in historical past if discovered to be true.

The nameless hacker, recognized solely as “ChinaDan”, posted on hacker discussion board Breach Boards final week providing to promote the greater than 23 terabytes (TB) of knowledge for 10 bitcoin, equal to about $200,000 (£165,000).

“In 2022, the Shanghai Nationwide Police (SHGA) database was leaked. This database accommodates many TB of knowledge and data on billions of Chinese language citizen,” the publish mentioned.

“Databases comprise data on 1 billion Chinese language nationwide residents and a number of other billion case information, together with: identify, handle, birthplace, nationwide ID quantity, cellular quantity, all crime/case particulars.”

The id of the hacker is just not clear. The Guardian was unable to confirm the authenticity of the publish, and a number of other numbers within the pattern database had been now not in use when contacted by the Guardian.

Officers in China have but to reply to the alleged information hack as of Monday.

Yi Fu-Xian, a senior scientist on the College of Wisconsin-Madison, mentioned he had downloaded the pattern information obtainable on the web and located data associated to his residence county in Hunan province.

“The information contained details about virtually all of the counties in China, and I've even found information associated to a distant county in Tibet, the place there are only some thousand residents,” he mentioned, including that the demographic pattern extracted from the information “is worse than the officers have reported”.

China has in recent times seen numerous information leak incidents. In 2016, delicate informationabout highly effective Chinese language people, together with the founding father of Alibaba, Jack Ma, was posted on Twitter.

These incidents alarmed the Chinese language authorities. Final 12 months, China handed legal guidelines governing how private data and information generated inside its borders ought to be dealt with.

Over the weekend, ChinaDan’s publish has been extensively mentioned on China’s Weibo and WeChat social media platforms over the weekend, with many customers anxious it might be actual.

The hashtag “Shanghai information leak” was blocked on Weibo by Sunday afternoon, however there are nonetheless a couple of discussions on Chinese language social media about this incident. Customers expressed shock and dismay, with some saying they had been now “clear human beings”.

Kendra Schaefer, head of tech coverage analysis at Beijing-based consultancy Trivium China, mentioned in a publish on Twitter it was “onerous to parse reality from hearsay mill”.

If the fabric the hacker claimed to have got here from the ministry of public safety, it might be unhealthy for “numerous causes”, Schaefer mentioned. “Most clearly it might be amongst largest and worst breaches in historical past.”

Zhao Changpeng, CEO of Binance, mentioned on Monday the cryptocurrency alternate had stepped up user-verification processes after the alternate’s menace intelligence detected the sale of information belonging to 1 billion residents of an Asian nation on the darkish internet.

Signal as much as First Version, our free every day publication – each weekday morning at 7am BST

He wrote on Twitter that a leak might have occurred as a result of “a bug in an elastic search deployment by a (authorities) company”, with out saying if he was referring to the Shanghai police case.

The declare of a hack comes as China has vowed to enhance safety of on-line person information privateness, instructing its tech giants to make sure safer storage after public complaints about mismanagement and misuse.