Shanghai COVID health mobile app

Profile narrative

The organisation provides a mobile application focused on COVID‑19 health services for residents of Shanghai. The app functions as a digital health code platform, allowing users to display their infection status, vaccination records, and recent test results. It is intended to support municipal pandemic‑control measures by facilitating access to venues and transportation based on health credentials. The service is delivered through a smartphone interface that integrates with local health databases. Its primary market is the population of Shanghai, China.

According to a breach announcement dated 10 August 2022, the personal data of approximately 48.5 million users of the app was offered for sale on a hacking forum. This figure indicates that the application had reached a substantial user base, likely covering a significant share of Shanghai’s inhabitants. The alleged dataset was priced at $4,000 and reportedly included sensitive information collected through the municipal health tool. The incident was described as the second alleged breach targeting Shanghai’s systems within a month. No further quantitative details about the app’s size or reach are provided in the source material.

The app is distinguished by its specialization in COVID‑19 related health management and its integration with Shanghai’s public‑health infrastructure. It operates within a regulatory environment governed by Chinese data‑protection and cybersecurity laws applicable to health information. Specific details about the organisation’s ownership, parent company, or subsidiary structure are not disclosed in the available sources. The headquarters of the service is located in China, as indicated in the organisational context. Consequently, the profile is limited to the confirmed facts regarding the app’s purpose, scale of use, and the reported security incident.

Incidents

1 incident linked to this organisation.