A database containing sensitive information of over 630 million Chinese users is being advertised on a Russian-language hacker forum, Cybernews reports.
The database allegedly includes personal and financial data such as full names, national ID numbers, home addresses, mobile phones, gender, and bank card numbers.
The seller behind the ad claims that 30% of the entries contain bank card details. A review of data samples provided by the threat actors shows that most exposed users had UnionPay bank cards.
UnionPay is a Chinese state-owned financial services corporation headquartered in Shanghai, China. It provides bank card services and a major card scheme in mainland China. It is the largest card network in China.
The seller claims that the data was stolen in April this year, but doesn’t reveal where it was obtained from. However, samples provided by threat actors suggest that the data was taken from a server hosted in France, Cybernews notes.
Last year, a hacker put up for sale the personal information of 1 billion Chinese citizens from obtained from a Shanghai police database on the now-defunct Breach Forums hacker forum, including name, address, birthplace, national ID number, mobile number, all crime/case details.