CNN claimed that a hacker got a massive cache of extremely sensitive data from a state-run Chinese supercomputing facility, potentially one of the most severe data breaches the country has ever experienced. The purported breach contains more than 10 petabytes of data, including confidential defence documents and detailed missile drawings, raising major concerns about national security and cybersecurity resilience.
To put the scale into perspective: A petabyte is equal to 1,000 terabytes, whereas a high-spec laptop typically contains about one terabyte.
Experts believe the data was obtained from the National Supercomputing Center in Tianjin (NSCC), a critical facility that offers computing infrastructure to over 6,000 clients throughout China. These include institutes engaged in sophisticated scientific research as well as defense-related activities.
Established in 2009 as China's first supercomputing hub, the Tianjin facility is part of a larger network of similar facilities in key cities such as Guangzhou, Shenzhen, and Chengdu.
Cybersecurity researchers who have studied sections of the released files and interacted with the suspected hacker believe the attack took place over several months without being detected. In early February, the attacker, known as "FlamingChina," released samples of a supposed dataset on an anonymous Telegram channel.
According to the claims, the data covers a wide range of sectors, including aerospace engineering, military research, bioinformatics, and fusion modelling. It is also believed to be affiliated with significant organisations such as the Aviation Industry Corporation of China, the Commercial Aircraft Corporation of China, and the National University of Defence Technology.
While the entire dataset is purportedly being sold for a hefty price, potentially hundreds of thousands of dollars, smaller previews have supposedly been made available for thousands of dollars, with transactions facilitated in bitcoin. However, independent verification of these claims remains problematic.
Experts reviewing the sample data found documents branded "secret" in Chinese, along with technical files, simulations, and representations of military equipment.They're exactly what I would anticipate from a supercomputer center. Large computing operations would be performed using supercomputers. Dakota Cary, a consultant at cybersecurity firm SentinelOne, said that the breadth of samples provided by the dealers reflects the supercomputing center's customer base.
How did the breach occur?
According to preliminary investigation, the hack may have used system architecture weaknesses rather than extremely advanced approaches. The attacker claimed to have gotten access via a compromised VPN domain and then used automated tools to harvest data over a six-month period.
The attacker reduced detection risk by dispersing extraction across numerous systems, making it more difficult to notice minor data transfers. "Somebody on the defensive side is less likely to notice small amounts of data leaving the system," Cary said. He emphasised that, while effective, this strategy is not particularly new.
If confirmed, the incident could reveal broader structural flaws in China's digital infrastructure, especially at a time when the country is working to improve its position in advanced technology and artificial intelligence.