Cyber Incident Victim: Changxing County Administration
Date:
Oct 2014
Location:
China
Summary
A hacker group leaked sensitive data from Chinese government websites, including hundreds of phone numbers, email addresses, IP addresses, and names from the Ningbo Free Trade Zone and a job-search platform operated by Changxing County Administration. The attackers claimed the breach was retaliation against the government's response to Hong Kong protests, specifically citing tear gas use against demonstrators. They asserted infiltration of over 50 mainland government databases and the release of 50,000 credentials, framing it as solidarity with Hong Kong citizens. The incidents caused temporary disruptions to targeted sites, rendering some inaccessible. Chinese authorities characterized the attacks as part of broader cyber threats from international hacker collectives.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 2 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
In October 2014, the hacktivist group Anonymous leaked sensitive data from Chinese government websites, including a job-search platform operated by Changxing County Administration in Zhejiang province. The breach occurred shortly after Chinese authorities publicly denounced Anonymous’s threats of cyber-attacks, which the group framed as support for Hong Kong protesters demonstrating against Beijing’s policies. Anonymous released hundreds of phone numbers, email addresses, individual IP addresses, and names from both the Changxing County Administration site and the Ningbo Free Trade Zone’s systems. The group claimed to have already infiltrated over 50 mainland Chinese government databases, leaking approximately 50,000 usernames and emails as part of its campaign to “stand and fight alongside the citizens of Hong Kong.” This escalation followed earlier cyber actions targeting Hong Kong websites, beginning with a public warning issued by Anonymous on October 2. On October 3, the group rendered some sites intermittently accessible or entirely inaccessible. A video message from Anonymous declared “cyberwar” against the Chinese government and police, citing the use of tear gas against demonstrators as justification.
The Chinese Foreign Ministry characterized Anonymous’s actions as evidence that China faced significant threats from international hacker groups and was a victim of cyber-assaults. Security experts like Michael Gazeley of Network Box cautioned that attributing the attacks definitively to Anonymous was complicated by the group’s loose, decentralized structure. Media reports confirmed the exposure of sensitive personal and institutional data but noted uncertainty regarding why Changxing County Administration’s job site and the Ningbo Free Trade Zone were specifically targeted. No statements from Changxing County officials or details about technical remediation efforts were disclosed in available reporting. The incident highlighted tensions between Beijing and transnational hacker collectives during a period of heightened political unrest in Hong Kong, with Anonymous leveraging data breaches as both a retaliatory measure and a form of digital protest advocacy.