Researcher Uncovers Publicly Exposed Chinese Surveillance Database Tracking Foreign Residents

A cybersecurity researcher discovered a publicly accessible Chinese government website that collected extensive data on nearly 12,000 foreign residents within China, including many from Israel. The platform, believed to be operated by the Public Security Bureau of Zhangjiakou city, contained detailed personal information such as locations visited, hospital visits, fuel purchases, travel by flights and trains, and demographic details like nationality, gender, marital status, and profession.

The exposed database included surveillance footage from cameras at intersections, markets, malls, and mosques, illustrating the vast scale of China's monitoring system. It tracked foreign nationals from countries including Australia, Canada, New Zealand, the UK, the US, and key nations like Israel, Egypt, Iran, Morocco, Pakistan, and Sudan. The system also listed over 700 foreign residents in Zhangjiakou, more than 300 foreign journalists, and individuals from Hong Kong and Taiwan.

Mark Hooper, the Amsterdam-based cybersecurity expert who found the site during routine internet research, noted that the platform was left unsecured with a pre-filled username and password, allowing unrestricted access. Hooper downloaded as much data as possible before the site was taken offline in May. He was surprised to find his own personal information included, likely due to his previous work in China.

The New York Times reported on the discovery, highlighting the scale of China's surveillance and intelligence gathering on foreign residents. The exposed system underscores the Chinese authorities' extensive use of facial recognition, medical records, financial data, and other sources to monitor and analyze the behavior of foreigners living in or visiting China.