Researchers discover unsecured database leaking 4 billion user records
Learn More
Cybersecurity researcher Bob Dyachenko from SecurityDiscovery.com in collaboration with the Cybernews research team is reporting a massive exposed unsecured database leaking over 4 billion user records.
It represents the biggest single-source leak of Chinese personal data ever identified and likely affects hundreds of millions of users, primarily Chinese citizens.
The exposed database contained 631 gigabytes of sensitive information across sixteen different data collections, ranging from half a million to over 800 million records from various sources. The Cybernews research team believes the dataset was collected and maintained for building comprehensive behavioral, economic, and social profiles for surveillance, profiling, or data enrichment purposes.
The exposed data included:
- WeChat user identifiers and metadata (over 805 million records in "wechatid_db" collection)
- WeChat communication logs or user conversations (577 million records in "wechatinfo" collection)
- Residential addresses with geographic identifiers (780 million records in "address_db")
- Financial data including payment card numbers, dates of birth, names, and phone numbers (630 million records in "bank" collection)
- Personal identifiers, phone numbers, and usernames (610 million records in what appears to be "three-factor checks")
- Alipay payment card and token information (300 million records in "zfbkt_db")
- Additional Alipay financial data (20 million records)
- Gambling information
- Vehicle registration details
- Employment information
- Pension funds and insurance data
- Taiwan-related information (in "tw_db" collection)
The number of affected individuals is estimated in the hundreds of millions. The database was quickly taken down after the discovery, preventing researchers from conducting an extended analysis or identifying its owners.
