Chinese e-commerce giant Alibaba Group Holdings has been hit by “what appears to be one of the biggest data breaches in history”, says Cissy Zhou in Nikkei Asia. Its shares fell by 6% last Friday after executives were called in by the Shanghai police to be questioned about the affair.
The problem began a fortnight ago when a hacker offered to sell online records from the Shanghai police database. He said he had “information about one billion Chinese citizens” and posted a sample of 750,000 records. The Chinese authorities are furious that the data, which reportedly contains “names, ID numbers, phone numbers, addresses, criminal records and even online orders” appears to have been stolen from a server hosted by Alibaba.
The leak is particularly embarrassing for Alibaba given that founder Jack Ma “was an early evangelist of the use of data in policing and social control”, says Karen Hao in the Wall Street Journal. Indeed, Ma’s claims that Big Data “would help the public security agencies track down thieves and predict terrorist attacks” has helped Alibaba become “the biggest public cloud-service provider in China”.
Try 6 free issues of MoneyWeek today
Get unparalleled financial insight, analysis and expert opinion you can profit from.
Start your trial
Sign up for MoneyWeek’s free twice-daily newsletter.
Join more than 165,000 subscribers and keep yourself informed with latest financial news, insights and expert analysis to help you understand what really matters when it comes to your finances.
Join more than 165,000 subscribers and keep yourself informed with latest financial news, insights and expert analysis to help you understand what really matters when it comes to your finances.
But this relationship has not always been smooth. The ministry in charge of technology suspended a cybersecurity partnership with Alibaba’s cloud-computing unit last December after Beijing alleged the company “failed to report a global software vulnerability to it in a timely manner.”
Latest Videos FromMoneyWeek
Was it the government’s fault?
Still, it looks like Alibaba is being made a “scapegoat” for the Chinese government’s failings, especially its “astonishing lack of cybersecurity caution despite its own user data protection mandate”, says Yawen Chen on Breakingviews.
It seems that in this case the government left the data “sitting around without a password”, which means that “anyone could have accessed [it] if they knew the web address”. However, even if Alibaba wasn’t at fault, this may not matter, as the scandal could dent other clients’ confidence, “especially those from the public sector”.
Alibaba isn’t the only firm worried about the fallout, say Sarah Zheng and Coco Liu on Bloomberg. This episode may only “fuel Beijing’s resolve to clamp down on domestic tech giants and accelerate a move away from their private cloud services”. Such a migration is already under way, with the ongoing crackdown on “formerly high-flying tech giants” nudging risk-averse institutions toward state-owned providers.
Technology firms are now also likely to be affected by a new Chinese competition law, says Lex in the Financial Times. The law, which comes into force in August and requires Chinese companies with global sales of $1.8bn to receive government approval before merging, doesn’t target the technology sector specifically, but it will have an “outsized impact” on the industry. Before the pandemic and the clampdown, Alibaba and Tencent “accounted for nearly half of all venture-capital flow for acquisitions in mainland China”.
