{"id":19212,"date":"2020-09-17T15:37:27","date_gmt":"2020-09-17T10:07:27","guid":{"rendered":"https:\/\/www.techjockey.com\/blog\/?p=19212"},"modified":"2025-12-17T13:31:46","modified_gmt":"2025-12-17T08:01:46","slug":"zhenhua-data-leak","status":"publish","type":"post","link":"https:\/\/www.techjockey.com\/blog\/zhenhua-data-leak","title":{"rendered":"Zhenhua Data Leak: Prompts the Alarming Data Vulnerability Scenario"},"content":{"rendered":"\n

Zhenhua, the word may sound like a tongue twister, but it has recently given sleepless nights to many important personalities across the world, including India. As per the latest report, a China-based tech company, Zhenhua Data Information Technology Co. Limited is spying on the personal data of more than ten thousand important personalities in India and abroad.<\/p>\n\n\n\n

<\/span>The List of People being Spied On: It\u2019ll Send Shivers Down Your Spine<\/span><\/h2>\n\n\n\n

The list seems surprising to everyone as it includes names like Indian Prime Minister Narendra Modi, President Kovind, and the God of Cricket Sachin Tendulkar. The list is huge and includes many big names from the opposition parties in the center, state chief ministers, bureaucrats, national advisors, chiefs of the Army, Navy, and Air Force, etc. The long list of personalities being snooped on by this China-based technology company has kept the Indian security agencies quite busy for the last couple of days.<\/p>\n\n\n\n

<\/span>Another Blow to the Indo-China Relationship<\/span><\/h2>\n\n\n\n

Zhenhua, a Shenzen-based data information technology company has confirmed its links with Chinese military and security agencies. The company is mining important information about top Indians and adding fuel to the dubious intentions of Chinese intelligence against its neighboring country. <\/p>\n\n\n\n

<\/span>Is the Fear of Hybrid Warfare Coming True?<\/span><\/h2>\n\n\n\n

 The database with Zhenhua includes many world entities from all major countries, irrespective of their current state of alliance or enmity with China. Big names from countries like the United States, United Kingdom, Australia, Canada, Japan, Germany, and the UAE clearly indicate that the Chinese government is aiming for a much bigger tension across borders and seas.<\/p>\n\n\n\n

<\/span>Not Just Individuals, But Organizations Made to the List Too<\/span><\/h2>\n\n\n\n

The leaked database, created by Zhenhua, shows the interest of Chinese Intelligence in the recent dealings of Australia’s space and science sector with the NASA lab in California. China\u2019s intelligence service is not just interested in the movement and activities of famous personalities but is also spying on the movement of goods in international dealings.<\/p>\n\n\n\n

What\u2019s more sinister is that Zhenhua has been misusing artificial intelligence tools to monitor private records. These include your social media habits, bank statements, job interest, etc. <\/p>\n\n\n\n

Much of this data is securely stored over a company\u2019s devices and servers, inaccessible to outsiders. But if the Chinese have already laid their hands on such personal data, we can\u2019t even imagine the scope of data breach we might be staring at. <\/p>\n\n\n\n

<\/span>Indian Government Agencies Need to Beef Up Their Cyber Security<\/span><\/h2>\n\n\n\n

This incident has raised another question – how uptight are our data security measures?<\/p>\n\n\n\n

Are we conducting enough security testing to address cyber\nthreat exposures and vulnerabilities?<\/p>\n\n\n\n

With cybercriminals making repetitive attempts to breach\nnetworks, government agencies need to have better visibility of their security\nloopholes. Services like VAPT and unified data protection have become the need\nof this hour to perform 360-degree vulnerability assessment through manual and\nautomated means.<\/p>\n\n\n\n

Speaking specifically about VAPT, VAPT consists of two processes: Vulnerability Assessment (VA) and Penetration Testing (PT). <\/p>\n\n\n\n

Most importantly, VAPT services<\/a> provide ongoing guidance and advice by experts to address cybersecurity risks. It also involves penetration testing to figure out any vulnerability in systems, applications and the overall IT infrastructure.<\/p>\n\n\n\n

These are the following types of VAPT tests for organizations: <\/p>\n\n\n\n