Massive Data Breach in China: Sensitive Military Information Stolen

Overview of the Data Breach

A significant data breach has reportedly occurred in China, where a hacker has stolen an extensive collection of sensitive information, including classified military documents and missile designs, from a government-operated supercomputer. This data heist, estimated to exceed 10 petabytes, is believed to have originated from the National Supercomputing Center (NSCC) located in Tianjin, which caters to over 6,000 clients, including prominent scientific and defense organizations.

Details of the Leak

The breach came to light when a group identifying itself as “FlamingChina” shared samples of the stolen data on an anonymous Telegram channel on February 6. They claim the dataset encompasses research in various fields, including aerospace engineering, military advancements, bioinformatics, and fusion simulations. The data is reportedly linked to significant entities such as the Aviation Industry Corporation of China, the Commercial Aircraft Corporation of China, and the National University of Defense Technology.

Potential Intelligence Implications

Experts analyzing the leaked data suggest that it aligns with the type of information typically stored at a supercomputing facility. The leaked materials reportedly include documents labeled as “secret” in Chinese, along with technical files, simulations, and designs of military hardware like missiles and bombs. Given the vast size of the dataset, it is likely to be of great interest to state intelligence agencies capable of processing such extensive information, although some governments may already possess similar data.

Method of the Breach

Cybersecurity analysts indicate that the hacker gained access through a compromised VPN domain. Once inside the system, they allegedly utilized a botnet to gradually extract data over approximately six months. Instead of transferring large quantities of data at once, the hacker distributed the transfers across multiple systems, complicating detection efforts. Experts believe this approach did not require sophisticated techniques but rather exploited existing vulnerabilities in the system's architecture.

If the breach is confirmed, it raises concerns about deeper cybersecurity issues within China. Experts have previously pointed out weaknesses in the country's cybersecurity infrastructure, noting instances where large databases were inadequately protected. Chinese officials have acknowledged the urgent need to enhance security measures for critical infrastructure, data, and AI systems.