InfoSecBulletin Cybersecurity for mankind
Hackers are claiming that one of China’s most strategically important computing facilities suffered a massive cyber intrusion, with more than 10 petabytes of sensitive information allegedly taken from a state-run supercomputing environment that experts suspect is the National Supercomputing Center in Tianjin.
If true, this event might be one of the biggest data theft cases in China. It’s not just because a lot of data was taken, but also because the Tianjin center helps over 6,000 clients in science, industry, and defense.
“InfoSecCon-2026: Bangladesh’s Cybersecurity Leaders Unite to Shape a Safer Digital Future”
Microsoft Patches CVSS 10.0 Azure AI Foundry Vulnerability Allowing Privilege Escalation
AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage
Cisco Warns of Critical ISE 0-Day Flaw and Hackers Allegedly Selling Fortinet FortiGate 1-Day Flaw
Anthropic prepares “Claude Money” to analyze bank account and financial data
GhostCode Phishing Kit Evades Microsoft 365 MFA to Hijack Accounts in 78 Seconds
CISA Warns of Cisco Secure Email Gateway 0-Day Flaw Actively Exploited in Attacks
VPN flaw exposed 246,000 personnel records in japan
Hackers deploy Casbaneiro Trojan that activates on bank websites
German police read Signal, Telegram, WhatsApp messages without breaking encryption
The report on the claimed leak says that the leaked documents contain very sensitive defense papers and missile designs. This raises worries about the potential sharing of research related to military and aerospace projects.
Supercomputing Center DataBreach
The target is not just any data center. The Tianjin supercomputing facility is a national asset offering powerful computer resources for big research groups and defense-related organizations. A breach here could have serious effects on national security and business secrets.
Because these centers hold work from many groups in one place, a breach could reveal information from several organizations at the same time instead of just one contractor or ministry.
Chinese authorities and external observers have not independently confirmed the complete extent of the incident, leaving it as a key unanswered question as the claims persist online.
A researcher about the event said that access may be started through a hacked VPN domain. Then, a botnet was used to break into systems, take files, and keep the stolen data for about six months.
If that timeline is right, it means someone had long-term access to sensitive systems linked to China’s important science and defense computing tasks.
The alleged sample data appeared to include documents marked “secret” in Chinese, along with technical files, animated simulations and renderings of defense equipment including bombs and missiles.
“They’re exactly what I would expect to see from the supercomputing center,” said Dakota Cary, a consultant at cybersecurity firm SentinelOne who focuses on China and has reviewed the samples placed online from the alleged hack.
“You would use supercomputer centers for large computational tasks. The swath of samples that the sellers put out kind of really speaks to the breadth of customers that this supercomputing center had,” Cary said.
Most of those customers would have little reason to maintain their own supercomputing infrastructure independently, he added.
