Baidu faced allegations concerning an internal data breach after the daughter of Vice President Xie Guangjun leaked users' personal details online. Baidu dismissed these claims, stating the information originated from foreign doxing databases and police were involved to counteract the accusations. Despite the assurances and lack of direct access to data by executives, Baidu's reputation may incur damage due to the heightened sensitivity around personal data handling in China.
Source: https://www.scworld.com/brief/data-breach-refuted-by-baidu-after-user-info-leak
TPRM report: https://scoringcyber.rankiteo.com/company/bv-baidu-venture
"id": "bv-939032125",
"linkid": "bv-baidu-venture",
"type": "Breach",
"date": "3/2025",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
{'affected_entities': [{'industry': 'Technology',
'location': 'China',
'name': 'Baidu',
'type': 'Company'}],
'attack_vector': 'Internal Data Leak',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Personal details'},
'description': 'Baidu faced allegations concerning an internal data breach '
'after the daughter of Vice President Xie Guangjun leaked '
"users' personal details online. Baidu dismissed these claims, "
'stating the information originated from foreign doxing '
'databases and police were involved to counteract the '
'accusations. Despite the assurances and lack of direct access '
"to data by executives, Baidu's reputation may incur damage "
'due to the heightened sensitivity around personal data '
'handling in China.',
'impact': {'brand_reputation_impact': 'Potential damage due to heightened '
'sensitivity around personal data '
'handling in China',
'data_compromised': "Users' personal details"},
'response': {'communication_strategy': 'Baidu dismissed the claims',
'law_enforcement_notified': 'Police involved'},
'threat_actor': 'Daughter of Vice President Xie Guangjun',
'title': 'Baidu Internal Data Breach Allegations',
'type': 'Data Breach'}