Alleged supercomputer data theft

A hacker claims to have breached a Chinese state-run supercomputer and is trying to sell what may be over 10 petabytes of stolen data, reportedly including defense and military research. The incident is being framed as one of the largest known data exfiltrations from China and underscores concentration risk in large compute estates. (edition.cnn.com) (indiatoday.in)

A hacker using the name “FlamingChina” is trying to sell what researchers say could be more than 10 petabytes of data taken from a Chinese state-run supercomputing center, and the samples reportedly include files tied to missiles, bombs, fighter jets, and war simulations. (cnn.com) (indiatoday.in) Ten petabytes is about 10,000 terabytes, which is roughly the storage of 10,000 high-end laptops if each held one terabyte. The seller first surfaced in early February 2026 on an anonymous Telegram channel and posted sample files to prove the cache existed. (indiatoday.in) The facility identified in reporting is the National Supercomputing Center in Tianjin, a government-backed computing hub that opened in 2009 and became known for hosting the Tianhe-1A machine, which once topped the global Top500 ranking. A place like that is less like one company’s server room and more like a shared industrial power plant for computation. (cnn.com) (baike.baidu.com) That shared setup is the whole story here: the Tianjin center reportedly supports more than 6,000 clients, including universities, aerospace groups, and defense-linked research bodies. If one central system is breached, the attacker does not get one victim’s files; the attacker can reach across thousands of projects stored in the same estate. (indiatoday.in) (wionews.com) Researchers cited in the reports say the break-in may have started through a compromised virtual private network, which is a remote-access doorway staff use to log in from outside the building. They say the data was then siphoned out over about six months in small chunks, using a botnet so the traffic looked less like one giant theft and more like normal background noise. (indiatoday.in) The striking part is that the method described was not a science-fiction hack with a brand-new exploit. The reporting says analysts who reviewed the samples believed the attacker used fairly ordinary tradecraft, which makes the alleged breach look more like a failure of monitoring than a triumph of exotic malware. (indiatoday.in) Some of the sample material reportedly carried Chinese “secret” markings and referenced organizations such as the Aviation Industry Corporation of China and the National University of Defense Technology. Those names matter because they sit close to aircraft design, weapons development, and military research rather than ordinary civilian computing. (indiatoday.in) Chinese authorities had not publicly confirmed the breach in the reporting available on April 8 and April 9, 2026, so the full scale still rests on samples, analyst review, and the seller’s own claims. But even if the final number lands below 10 petabytes, a leak from a national supercomputing hub would still rank as a major intelligence and security failure because the center concentrates so many high-value users in one place. (cnn.com) (indiatoday.in)

Get your own daily briefing

Scout delivers personalized news, insights, and conversations tailored to your role and industry.

Download on the App Store

Shared from Scout - Be the smartest in the room.