Group-IB: since the data of ~1B Chinese citizens appeared for sale, smaller tranches have appeared on forums, often including personal info and national IDs
Bloomberg : Tweets: @jeffstone500 Tweets: Jeff Stone / @jeffstone500 : Vast amount of Chinese data for sale on dark forums after Shanghai cops lost control about 1 billion people, @_szheng finds. Breach Forums, the home to a lot of these listings, shrugs at Beijing's attention: “We do not have to obey Chinese laws.” https://www.bloomberg.com/...
Context & Ripple Effects
This story closes the loop on the 23TB Shanghai police database breach first offered in July 2022 for 10 BTC: Group-IB now confirms the data of roughly 1 billion Chinese citizens is not a one-off listing but a commodity, with smaller tranches carrying personal information and national IDs appearing across forums. The original theft was enabled by an exposed management dashboard left open from April 2021 to June 2022, per WSJ-reported experts.
The commercial afterlife matters more than the initial sale. Domestic platforms censored the breach within days, but Breach Forums — hosting many of the listings — publicly states it does not have to obey Chinese laws, leaving Beijing with no external lever. That gap between domestic suppression and foreign-hosted resale is where this story sits.
First-order effects
- National IDs and personal details of up to 1 billion Chinese residents are now circulating in resalable chunks, turning a single 10 BTC listing into an ongoing supply of verified identity data for fraud and doxxing buyers.
- Beijing faces a breach it cannot censor into silence: the resale venue explicitly disclaims Chinese jurisdiction, so domestic takedowns of WeChat and Weibo discussion do not touch the actual marketplace.
Second-order effects
- The WSJ's July finding that China's new data security rules are unevenly enforced gets a stress test — a police database failing this publicly invites scrutiny of how state agencies themselves comply with rules written mainly for private firms.
- Every organization holding aggregated Chinese identity data, government and commercial alike, inherits a pricing benchmark: once 1 billion records are in the market, incremental tranches compete against an established stock rather than scarce leaks.
Third-order effects
- If the pattern holds, China's mass-collection model — the WSJ's framing of a thriving underground market fed by centralized data hoards — means each state-side breach converts directly into a durable criminal inventory, forcing a choice between collection scale and stewardship credibility.
- Jurisdictional arbitrage becomes the structural story: as long as major resale forums operate outside Chinese law, Beijing's enforcement tools cap out at domestic platforms, pushing the state toward either international pressure campaigns or tighter controls on what its own systems collect and expose.
The trend: State-scale data aggregation is converting single mega-breaches into permanent underground commodity markets that domestic censorship cannot reach.