Experts say a dashboard used to manage the Shanghai police database was left exposed from April 2021 to June 2022, letting a hacker steal details on ~1B people
Cybersecurity experts say error allowed theft of records of nearly 1 billion people, leading to $200,000 ransom note Tweets: @bhuvanbagga , @_karenhao , @_karenhao , @karynelevy , and @_karenhao Tweets: @bhuvanbagga : If you thought Indian data security was bad, this from China is next level ― shambles https://twitter.com/... @_karenhao : I spoke to two cybersecurity experts @vinnytroia & @MayhemDayOne who both run cybersecurity services that regularly scan the web for unsecured databases. They each discovered this database at different points earlier this year but didn't immediately realize what it was. @_karenhao : After the recent news about the leak, they went back through their notes and found an exact match to the description of the database that a user on a cybercrime forum is now selling—for the same price tag as the ransom amount: 10BTC. Karyne Levy / @karynelevy : Who among us. https://www.wsj.com/... https://twitter.com/... @_karenhao : The Shanghai police data heist grows more insane: Experts say the database of nearly 1b Chinese citizens was not hacked—it simply had no password, allowing the thief to waltz in, wipe the data & leave a ransom note: “contact_for_your_data...recovery10btc. ” https://www.wsj.com/... Expand More For Next Unexpand More For Next