Data Breach at Mysterious Chinese Firm Reveals State-Owned Cyber Weapons and Even a List of Targets

Why It Matters

The disclosure provides an unprecedented view of China’s cyber‑espionage scale and sophistication, highlighting vulnerabilities in critical infrastructure worldwide and prompting governments and firms to reassess their defensive postures.

Summary

A breach at Chinese security firm Knownsec exposed more than 12,000 classified files that detail state‑linked cyber weapons, internal AI tools, and a target list spanning over twenty countries, including Japan, India, the UK and Nigeria. The leak includes massive data troves—95 GB of Indian immigration records, 3 TB of South Korean telecom call logs and 459 GB of Taiwanese transport data—and outlines Remote Access Trojans for Linux, Windows, macOS, iOS and Android as well as a malicious power‑bank hardware implant. Researchers say the documents show how a private firm is embedded in China’s national cyber‑espionage apparatus, while Beijing officially denied any knowledge of the breach.