Shanghai Billion Documents

In July 2022 a massive database containing information on approximately one billion Chinese citizens was offered for sale on a cybercrime forum. The data was allegedly exfiltrated from the Shanghai National Police database due to an unsecured Elasticsearch instance. The breach included names, addresses, identification numbers, and mobile phone numbers, as well as detailed crime reports and incident summaries. This event is considered one of the largest data security incidents in history, highlighting significant vulnerabilities in public sector data management and cloud security configurations within the region.