Ankura CTIX FLASH Update - September 2, 2022

Ransomware/Malware Activity

800 Million State-Surveillance Records Exposed in Publicly-Available Database

A giant database from Chinese electronics manufacturer Xinai Electronics was identified as being publicly available, exposing millions of faces and vehicle license plates. The exposed database held over 800 million records, which is the second largest known data security breach of the year. Xinai Electronics creates systems for "controlling access for people and vehicles to workplaces, schools, construction sites and parking garages across China." The company utilizes facial recognition for "a range of purposes beyond building access, including personnel management, like payroll, [and] monitoring employee attendance and performance", and it also uses a cloud-based vehicle license plate recognition system to allow drivers to pay for parking in unattended garages. According to the company's website, all data collected was supposedly stored securely on the