AcFun

AcFun is a Chinese video sharing platform headquartered in China, operating primarily within the domestic market. The service facilitates user-generated video content, allowing individuals to upload, share, and view multimedia, which positions it within the competitive landscape of online streaming and social media in China. The platform's scale is evidenced by a significant security incident in June 2018, where a data breach compromised nearly 10 million user accounts, exposing user identifiers, nicknames, and passwords; this figure indicates a substantial registered user base at that time. The breach involved unauthorized access to its systems, prompting the company to initiate forensic investigations and report the matter to law enforcement authorities. In the immediate aftermath, AcFun publicly urged affected users to update weak or reused credentials across various services to mitigate potential risks, demonstrating an operational focus on user account security despite the failure. The incident underscored the platform's handling of sensitive personal data and the inherent risks associated with large-scale user repositories.

Prior to or coinciding with the 2018 breach, AcFun had undergone a change in ownership, having been acquired by a rival streaming service that received backing from Tencent, a major Chinese technology conglomerate. This structural shift placed AcFun under the umbrella of a Tencent-supported entity, integrating it into a broader corporate strategy within China's digital media sector. Following the confirmation of the data breach, the organization issued a public apology to its users, acknowledging the security failure and its impact on user trust. In response to the incident, AcFun committed to strengthening its user data protection measures, signaling an intent to enhance cybersecurity protocols and safeguards. The breach and subsequent response highlight the platform's experience with major security challenges and its reactive measures to comply with user protection expectations and regulatory environments in China. The company's actions post-breach, including forensic collaboration with authorities and direct user communication, reflect standard incident response practices for a platform of its scale and market.