上海公安系统疑似被骇：10亿中国人资料在网上抛售，售10枚比特币！

就在不久前，有个骇客在网络上放话，表示他骇入了上海公安的系统，出售十亿名中国公民的信息，要价为10个比特币，大约20万美元。若消息属实，这很有可能是中国有史以来最大的个资外泄案！

hacker selling stolen shanghai national police database 1160x521 1

以上就是来自骇客论坛Breach Forums的截图，一个名为ChinaDan的骇客表示这些资料来自上海国家警察数据库，内容包含了超过十亿人的名字、住址、出生地点、手机号码、身份证号码以及各种犯罪信息详情，总数据高达23TB。

这些的数据详细到犯罪的时间、地点、犯案人、报案人，甚至是完整的犯罪过程纪录。

Our threat intelligence detected 1 billion resident records for sell in the dark web, including name, address, national id, mobile, police and medical records from one asian country. Likely due to a bug in an Elastic Search deployment by a gov agency. This has impact on …
— CZ 🔶 Binance (@cz_binance) July 3, 2022

Apparently, this exploit happened because the gov developer wrote a tech blog on CSDN and accidentally included the credentials.

1 billion records of private citizens' data. 😭 https://t.co/vPISm534Tn pic.twitter.com/FpMCGrpx08
— CZ 🔶 Binance (@cz_binance) July 4, 2022