Alibaba execs hauled in to discuss Shanghai Police data leak
Credit:
Wikipedia
Senior execs from Alibaba Cloud were summoned to discuss the data leak that saw information pertaining to a billion Chinese citizens sold on the dark web, according to Nikkei and The Wall Street Journal.
The leak is thought to have come from a misconfigured Alibaba Cloud server that did not require a password to access the trove, which exposed names, home addresses, ID numbers, phone numbers, and criminal records.
Cyber security researchers have also alleged the digital certificates had expired – perhaps four years previously. Since the discovery of the leak, Alibaba engineers have reportedly been ordered to review database architectures it offers in its cloud, and to check configurations used by other clients.
