Hacker offers to sell data of 48.5 million COVID app users in Shanghai

A hacker claims to have obtained the personal information of 48.5 million users of a COVID health mobile app run by the city of Shanghai, the second claim of a breach of the Chinese financial hub’s data in just over a month.
The hacker with the username “XJP” posted an offer to sell the data for $4,000 on the hacker forum Breach Forums.
The person provided a sample of the data, including the phone numbers, names, Chinese identification numbers, and health code status of 47 people.
Eleven of the 47 reached by Reuters confirmed that they were listed in the sample, though two said their identification numbers were wrong. Reuters was unable to further verify the authenticity of the hacker’s claim.
The true size and nature of these kinds of data hacks is sometimes overstated by the seller in an attempt to make a quick profit.