An anonymous hacker has понудио to sell the stolen personal data of over 1 billion Chinese citizens for 10 Bitcoin (BTC), roughly $200,000.
The data includes the names, birthplaces, addresses, phone numbers, national ID, criminal information, and other information of private citizens in the country.
Хакер наводно gained access to the Chinese Shanghai police database stealing over 26 terabytes of personal data.
Gigantic civilian data leak if confirmed: A hacker is selling an alleged Shanghai police data leak containing 1 billion Chinese nationals’ names, home addresses, ID #, phone #, criminal records, etc. Hacker says it’s from an Aliyun (Alibaba) private cloud server. pic.twitter.com/IRPG35SWYI
— Zeyi Yang (@ZeyiYang) Јула КСНУМКС, КСНУМКС
Many initially questioned the credibility of the hacker’s claim given the size and impact of such data. But the hacker revealed some parts of the data to show the extent of the damage.
Бинанце Direktor Цхангпенг Зхао acknowledged the claim. Earlier today, he tweeted that his company’s threat intelligence detected someone offering to sell the data of a billion residents from an Asian country.
Наша обавештајна служба о претњама открила је милијарду резидентних записа за продају на мрачном вебу, укључујући име, адресу, национални идентификациони број, мобилни, полицијску и медицинску документацију из једне азијске земље. Вероватно због грешке у примени Еластиц Сеарцх од стране владине агенције. Ово утиче на…
- ЦЗ? Бинанце (@цз_бинанце) Јула КСНУМКС, КСНУМКС
According to CZ, the breach was likely “due to a bug in an ElasticSearch deployment by a gov agency.” However, he has потврђен that the exploit was because “the gov developer wrote a tech blog on CSDN and accidentally included the credentials.”
Очигледно, овај експлоатација се догодила зато што је државни програмер написао технички блог на ЦСДН-у и случајно укључио акредитиве.
1 милијарда евиденција података приватних грађана. ? https://t.co/vPISm534Tn пиц.твиттер.цом/ФпМЦГрпк08
- ЦЗ? Бинанце (@цз_бинанце) Јула КСНУМКС, КСНУМКС
Zhao said that Binance has improved its security measures to verify affected users. He also called on other platforms to do the same.
Authorities in China are yet to confirm or deny the breach.
Source: https://cryptoslate.com/hacker-wants-10-bitcoin-in-exchange-for-stolen-chinese-citizens-data/