Major Data Breach at China's National Supercomputing Center

A significant cybersecurity breach has reportedly occurred at the National Supercomputing Center (NSCC) in Tianjin, China, where a hacker allegedly stole over 10 petabytes of sensitive data, including classified defense documents and missile schematics. This incident is considered one of the largest data thefts from China to date. The breach was executed with relative ease, allowing the hacker to extract vast amounts of data over several months without detection.

CNN

The hacker, who operates under the alias FlamingChina, claimed to have accessed the NSCC through a compromised VPN domain. They utilized a botnet to facilitate the extraction of data, distributing the download across multiple servers to minimize the risk of detection. Cybersecurity experts, including Dakota Cary from SentinelOne, have reviewed samples of the stolen data, which reportedly includes documents marked as "secret" and technical files related to military research and aerospace engineering.

CNN

The scale of the stolen dataset raises concerns about vulnerabilities within China's technological infrastructure, particularly as the country competes with the United States in technology and artificial intelligence. Marc Hofer, a cybersecurity researcher, noted that the dataset's size makes it particularly appealing to state intelligence services, which may have the resources to analyze the information effectively. The breach highlights ongoing issues with cybersecurity in China, which has faced criticism for its inadequate protections across various sectors.

CNN

CNN reached out to China's Ministry of Science and Technology and the Cyberspace Administration of China for comments regarding the breach but has not received a response. The Chinese government has previously acknowledged cybersecurity weaknesses, with the National Security White Paper of 2025 emphasizing the need for improved security measures in the network and data sectors.

CNN

Critics argue that this breach underscores a persistent issue within China's cybersecurity framework. Cary pointed out that the country has a history of poor cybersecurity practices, evidenced by previous incidents, such as the exposure of personal information of up to one billion Chinese citizens in 2021. The ongoing vulnerabilities pose risks not only to national security but also to China's ambitions as a global technology leader.

CNN

While experts have assessed the authenticity of the stolen data, CNN cannot independently verify the claims made by FlamingChina. There is also uncertainty regarding the extent of the data's impact and whether foreign governments have already acquired similar information.

CNN

As investigations into the breach continue, the incident may prompt a reevaluation of cybersecurity policies within China, particularly in light of its aspirations to enhance its technological capabilities and secure sensitive information against future threats.

CNN