WeChat

A massive data breach involving approximately 4 billion records has been discovered by cybersecurity researchers. The unsecured dataset, primarily consisting of Chinese customers' information, was found without password protection. The breach includes sensitive personal information such as full names, dates of birth, phone numbers, and financial data like card numbers, debt, and saving information. The largest collection of records, over 805 million, came from WeChat, a popular Chinese messaging app. This breach could be part of a surveillance effort, potentially leading to social engineering attacks, identity theft, fraud, or blackmail.

Source: https://www.techradar.com/pro/security/over-4-billion-user-records-leaked-in-largest-breach-ever-heres-what-you-need-to-know

TPRM report: https://scoringcyber.rankiteo.com/company/teamwechat

"id": "tea632060725",
"linkid": "teamwechat",
"type": "Breach",
"date": "6/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Millions',
                        'location': 'China',
                        'name': 'Chinese Citizens',
                        'type': 'Individuals'}],
 'attack_vector': 'Unsecured Database',
 'data_breach': {'number_of_records_exposed': 4000000000,
                 'personally_identifiable_information': ['Full Names',
                                                         'Dates of Birth',
                                                         'Phone Numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['PII', 'Financial Data']},
 'description': 'A huge dataset has been discovered unsecured online by '
                'researchers, containing roughly 4 billion records - including '
                'personal information. The data could potentially be part of a '
                'surveillance effort targeting Chinese citizens.',
 'impact': {'data_compromised': ['Personal Information', 'Financial Data'],
            'identity_theft_risk': 'High',
            'payment_information_risk': 'High'},
 'initial_access_broker': {'entry_point': 'Unsecured Database'},
 'motivation': ['Surveillance', 'Profiling', 'Data Enrichment'],
 'post_incident_analysis': {'root_causes': 'Lack of Password Protection'},
 'references': [{'source': 'TechRadar Pro'}],
 'title': 'Massive Unsecured Database Exposes 4 Billion Records',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Lack of Password Protection'}