8.7 Billion Records of Chinese Citizens Leaked

A massive unprotected database has been found on the internet. This was reported by Zamin.uz.

According to Cybernews researchers, this Elasticsearch cluster is said to contain approximately 8.7 billion records believed to belong to Chinese citizens. This incident is considered one of the largest personal data leaks in the history of surveillance.

The most concerning aspect is that this cluster remained unprotected and publicly accessible for three weeks. It is unknown whether anyone fully copied the data during this time, as the server was later shut down.

However, it is impossible to determine who accessed the cluster during this period. The leaked database consists of more than 160 indexes, which may include personal and communication data, government identifiers, account and login information, and even passwords.

This is not just a list of phone numbers but a complex collection of data that allows creating a complete digital profile of individuals. Experts emphasize that this database resembles a large data repository gathered from various sources.

Additionally, there is almost no information pointing to the server owner; it is hosted on a platform often used for malicious activities. Therefore, this may not be a simple technical error but the result of a targeted and prolonged operation.

The 8.7 billion records do not necessarily represent 8.7 billion people, as duplicate entries are likely present in the indexes. However, even accounting for duplicates, it is probable that the data concerns hundreds of millions of individuals.

This situation poses a significant risk. Such data can be used for crimes like fraud, account theft, blackmail, social engineering scams, or creating digital profiles of people.

This is a major opportunity for cybercriminals and a serious problem for ordinary users. What measures should regular users take?

Update your passwords, especially if you have used the same password in multiple places. Enable two-factor authentication to enhance security.

Be cautious when clicking on suspicious links. Monitor your bank and other accounts for any unusual activity.

Although there is currently no evidence that the data has been actively exploited, the fact that it was publicly accessible for three weeks is a serious threat. Therefore, it is important to remain vigilant regarding cybersecurity issues.