Cyber Security News

China’s Baidu Compromised in Data Leak, Affecting Users

Chinese tech giant Baidu has faced severe scrutiny after allegations emerged that a top executive’s teenage daughter had accessed and shared personal details of internet users online.

The incident has raised significant concerns about data privacy and security at one of China’s largest cloud providers.

The controversy began when online users accused the teenage daughter of Baidu vice president Xie Guangjun of posting personal information, including phone numbers, following an online argument.

The move sparked widespread outrage and speculation about whether Baidu’s internal systems had been compromised.

Baidu’s Response

Baidu vehemently denied any internal data breach, stating that all employees and executives are strictly prohibited from accessing user data without authorization.

The company attributed the leaked information to “doxing databases” on foreign platforms, which aggregate stolen private data.

According to the report from Reuters, To address the situation, Baidu has filed a police report over false claims circulating online, including a purported admission by the teenager that her father had provided her with access to the company’s databases.

Xie Guangjun, who oversees Baidu’s cloud division, apologized for his daughter’s actions and claimed she had obtained the information from overseas social networking sites.

This incident occurs amidst China’s intensified efforts to regulate data privacy.

In recent years, China has implemented stringent laws to protect personal data, aiming to curb the activities of shadowy online data sellers who trade-sensitive details such as birth dates and ownership records.

The introduction of these laws reflects a broader shift towards safeguarding citizen privacy in the digital age.

Market Impact

The controversy has had immediate financial repercussions for Baidu. The company’s shares dropped by more than 4% in Hong Kong trading this week, reflecting investor concerns over data security and potential legal repercussions.

As Baidu navigates this data leak controversy, the incident highlights the ongoing challenges in balancing user privacy with the demands of operating in a digital marketplace.

The company’s denial of any internal breach suggests a focus on external sources as the cause, but the episode underscores the need for robust safeguards against unauthorized data access, whether from within or outside an organization.

In a statement, Baidu reiterated its commitment to user privacy and data security, emphasizing that it is working closely with authorities to investigate the matter further.

As China continues to strengthen its data protection laws, companies like Baidu face increasing scrutiny and must ensure that their practices align with these evolving regulations.

The impact of this incident will likely be felt beyond Baidu, influencing broader discussions about data security and privacy in China’s tech sector.

Investigate Real-World Malicious Links & Phishing Attacks With Threat Intelligence Lookup - Try for Free

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

2 days ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

2 days ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

2 days ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

2 days ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

2 days ago