“Billions upon billions” of data records belonging to hundreds of millions of Chinese citizens were briefly exposed online, amounting to a massive 631-gigabyte leak.

Cybersecurity researchers reported that the dataset, briefly accessible online, included sensitive details from WeChat and Alipay.

According to Cybernews and Bob Diachenko, founder of Security Discovery, the leaked data appears to be part of an effort to compile behavioral, economic, and social profiles of Chinese citizens.

The centralized nature of the database suggests it was carefully maintained. The exposed information reportedly included residential addresses, banking details, names, phone numbers, and dates of birth.

This data could allow malicious actors to discern individuals’ spending habits, debts, savings, and places of residence.

Researchers warned of potential risks from the leak, including phishing, fraud, blackmail, and state-sponsored intelligence activities.

They could not identify the party responsible for the database before it was taken offline.

🔗 Source: Hong Kong Free Press

🧠 Food for thought

1️⃣ China’s surveillance ecosystem is the world’s most extensive data collection system

The leaked database aligns with China’s documented infrastructure for mass monitoring, which is unprecedented in scale and sophistication.

China operates more than 700 million surveillance cameras as of August 2023, far exceeding any other country’s monitoring network1.

The government has developed sophisticated data fusion systems like “Sharp Eyes” and “Police Cloud” that integrate multiple data streams—from video surveillance to e-commerce activity—to build comprehensive profiles of citizens2.

This infrastructure includes super-apps like WeChat and Alipay, which connect virtually all aspects of daily life—from payments to health records—to individual identities, creating vast repositories of behavioral data3.

The leaked database containing WeChat and Alipay records appears consistent with the Golden Shield Project’s approach, which has deployed at least 416 million AI-enabled surveillance cameras nationwide to monitor population movements and activities4.

2️⃣ State-sponsored cyber operations routinely target massive datasets