Massive China UnionPay Data Breach Exposes 171 Million Records on Dark Web A threat actor is offering a database allegedly containing 171 million records from China UnionPay, the state-owned financial services giant and backbone of China’s payment infrastructure, on a hacker forum. The breach, if confirmed, would rank as a national security crisis, exposing sensitive financial and personal data on an unprecedented scale. The stolen dataset reportedly includes: - Customer PII and national IDs: Full names, phone numbers, and potentially national ID numbers. - Financial information: Bank card numbers (partial or full), linked accounts, and transaction histories. - 171 million unique records, with the seller claiming duplicates have been removed. The sale is being conducted with professional criminal tactics, including escrow services and Telegram negotiations, signaling high confidence in the data’s authenticity. Such a breach could enable large-scale fraud, phishing, and identity theft, with criminals leveraging the stolen information to impersonate UnionPay, banks, or government agencies in sophisticated scams. China UnionPay, equivalent to Visa or Mastercard in China’s financial ecosystem, plays a critical role in the country’s payment infrastructure. A compromise of this magnitude threatens financial stability, requiring urgent intervention from Chinese authorities to validate the breach, trace its origin, and disrupt the sale. Financial institutions have been urged to enhance fraud detection systems to mitigate potential fallout, while citizens face heightened risks of targeted scams. The incident underscores the severe implications of breaches in foundational financial systems, with the potential for widespread economic and security repercussions.