Alleged Leak of Chinese Military-Linked Data and Knownsec Cyber Operations Documents

A broad exposure of Chinese state-linked sensitive data resurfaced across underground and open reporting, combining claims of a massive leak from the National Super Computer Center in Tianjin with renewed circulation of previously stolen Knownsec corporate documents. One report described a threat actor using the name airborneshark1 and the alias Flaming China to advertise an alleged 10 PB dataset purportedly taken from the NSCC, a government-owned high-performance computing environment used by academic institutions, state-owned enterprises, and military-affiliated research partners. The available sample data was assessed by the source as likely genuine, although the full scale of the claimed exfiltration remains unverified and may imply prolonged access or insider assistance if authentic.

Separately, a partial re-release of the Knownsec leak revived reporting on more than 12,000 classified documents allegedly exposing the internal capabilities of a major Chinese cybersecurity firm tied to government and military work. The leaked material reportedly included multi-platform RATs, Android malware targeting chat data, hardware-based collection tools such as a malicious power bank, and spreadsheets identifying overseas targets in more than 20 countries, alongside evidence of large-scale data theft from India, South Korea, and Taiwan. The Kazakhstan Daryn Online and Tanzania BRELA breach reports describe unrelated criminal data-sale listings and do not match the China-focused state-linked leak activity covered in the relevant reporting.