Discussion

• @_karenhao @_karenhao on x

  The Shanghai police data heist grows more insane: Experts say the database of nearly 1b Chinese citizens was not hacked—it simply had no password, allowing the thief to waltz in, wipe the data & leave a ransom note: “contact_for_your_data...recovery10btc. ” https://www.wsj.com/..…

• @newley Newley Purnell on x

  What's likely one of history's largest heists of personal data—and largest known cyber breach in China—occurred due to common vulnerability that left data open for taking. More great reporting by ⁦⁦@_KarenHao⁩ ⁦@rachelliang5602⁩ https://www.wsj.com/...

• @byron_wan Byron Wan on x

  🔥 a dashboard for managing and accessing the Shanghai Police database was set up on a public web address and left open without a password; anyone with relatively basic technical knowledge to waltz in and copy or steal the trove of information. 1/n https://www.wsj.com/...

• @joshchin Josh Chin on x

  Likely one of the largest thefts of data in history happened because someone left the door open. https://twitter.com/...

• @bhuvanbagga @bhuvanbagga on x

  If you thought Indian data security was bad, this from China is next level ― shambles https://twitter.com/...

• @_karenhao @_karenhao on x

  I spoke to two cybersecurity experts @vinnytroia & @MayhemDayOne who both run cybersecurity services that regularly scan the web for unsecured databases. They each discovered this database at different points earlier this year but didn't immediately realize what it was.

• @_karenhao @_karenhao on x

  After the recent news about the leak, they went back through their notes and found an exact match to the description of the database that a user on a cybercrime forum is now selling—for the same price tag as the ransom amount: 10BTC.

• @karynelevy Karyne Levy on x

  Who among us. https://www.wsj.com/... https://twitter.com/...