Security News > 2022 > January > Beijing 2022 Winter Olympics app bursting with privacy risks
The official app for Beijing 2022 Winter Olympics, 'My 2022,' was found to be insecure when it comes to protecting the sensitive data of its users.
Finally, the app violates China's own laws regarding privacy protection.
For domestic users, 'My 2022' collects names, national identification numbers, phone numbers, email addresses, profile pictures, and employment information and shares it with the Beijing Organizing Committee for the 2022 Olympics.
The severe privacy and security risks discovered by Citizen Labs were reported to the Beijing Organizing Committee for the 2022 Olympic and Paralympic Winter Games on December 3, 2021.
Yesterday, the app developers released the 'My 2022' version 2.0.5, and upon a new round of analysis, it was determined that the reported issues still remain unresolved.
On the question of whether China placed the flaws in the app intentionally, Citizen Labs finds that highly unlikely, considering that the recipient of the data is the Chinese state, and there's no incentive to create additional backdoors for anyone else.