Security News > 2021 > November > Beijing fingers foreign spies for data mischief, with help from consulting firm
China's Ministry of State Security released details this week of three alleged security breaches that saw sensitive data illegally transferred abroad. State-sponsored Xinhua News Agency described the breaches as "Endangering the security of important data" and said by disclosing them, the Ministry sought to build awareness of non-traditional security and, by doing so, better maintain national security.
The announcement, which deliberately coincides with the seventh anniversary of the country's anti-espionage law, described airline data stolen by an overseas intelligence agency, shipping data collected by a consulting firm that provided it to a foreign spy agency, and the construction of weather devices to transfer sensitive meteorological data abroad. It is unclear whether one or more foreign intelligence agencies conducted the alleged attacks, or if the actions were linked.
"Data security is related to national security and public interest, and is an important aspect of non-traditional security," reads a machine translation of the Xinhua piece, which goes on to encourage the public to report suspicious events to authorities.
Beijing has lately rewritten its rules to prevent data making its way outside of China, with new regulations and a proposal that businesses proposing to transfer data overseas must first undergo national security screening.
China's swift march to digitising its economy and government services has created a boom market for security services: analyst firm IDC recently reported revenue won by China's IT security service providers increased by 110 per cent year-on-year in the first half of 2021.
Other nations have no trouble naming China as a source of attacks, as demonstrated when it and Russia were not invited to last month's National Security Council Counter-Ransomware Initiative, a two-day meeting consisting of over 30 countries and the EU. Both countries were name-checked in a pre-event press call as sources of recent cybermalice.