Hacker offers to sell data of 48m Covid app users

BEIJING: A hacker has claimed to have obtained the personal information of 48.5 million users of a Covid health code mobile app run by the city of Shanghai, the second claim of a breach of public data in the city in just over a month. The hacker with the username as "XJP" posted an offer to sell the data for US$4,000 on the hacker forum Breach Forums on Wednesday The hacker provided a sample of the data including the phone numbers, names and Chinese identification numbers and health code status of 47 people. Eleven of the 47 reached by Reuters confirmed that they were listed in the sample, though two said their identification numbers were wrong. "This DB (database) contains everyone who lives in or visited Shanghai since the adoption of Suishenma," XJP said in the post, which originally asked for $4,850 before lowering the price later in the day. Suishenma is the Chinese name for Sh...