22 January 2025

Major leak exposes 1.5 billion Weibo, DiDi, Shanghai Communist Party, and others’ records

Vilius Petkauskas

While the mundanity of daily data leaks is hardly debatable, not all leaks are created equally. Take this, for example. An exposed database comprising a whopping 1.5 billion records covering numerous companies across different economic and social sectors. One uniting feature, however, is that victims are mostly Chinese citizens, making this discovery among the biggest of its kind.

The unprotected server with hundreds of millions of records, uncovered by the Cybernews research team, houses data from several major brands such as JD.com, a Chinese e-commerce company, Weibo, China’s top social media platform, DiDi, the country’s largest ride-hailing company, and many others.

Researchers believe the dataset is likely a mix of known and completely new data leaks collated on a single now-closed Elasticsearch server. While not all 1.5 billion records were exposed for the first time, some undoubtedly were, as we’ve found no indication of previous data leaks from companies included in the list.


No comments: