Over 90 Million Records Leaked by Chinese Public Security Department

guest · Jul 8, 2019

Over 90 Million Records Leaked by Chinese Public Security Department
July 8, 2019
https://www.bleepingcomputer.com/ne...leaked-by-chinese-public-security-department/

A publicly accessible and unsecured ElasticSearch server owned by the Jiangsu Provincial Public Security Department of the Chinese province Jiangsu leaked two databases containing over 90 million people and business records.

The two now secured databases contained than 26 GB of data in the form of personally identifiable information (PII) names, birth dates, genders, identity card numbers, location coordinates, as well as info on city_relations, city_open_id, and province_open_id for individuals.
In the case of businesses, the records included business IDs, business types, location coordinates, city_open_id, and memos designed to track if the owner of the business is known.

Sanyam Jain, a GDI Foundation member and an independent security researcher, found the misconfigured ElasticSearch cluster that allowed anyone to access it with full admin rights and contacted BleepingComputer to have the database secured.
Click to expand...

The researcher told BleepingComputer that the database contained the following data:
• 58,364,777 citizen records
• 33,708,010 business records
Click to expand...

Circuit · Jul 8, 2019

Cost of the internet.

Log in or Sign up

Over 90 Million Records Leaked by Chinese Public Security Department

guest Guest

Circuit Registered Member

Log in or Sign up

Over 90 Million Records Leaked by Chinese Public Security Department

guest Guest

Circuit Registered Member

Useful Searches