Zhaoping Data Breach (2018)

Zhaoping, one of China’s biggest online recruitment platforms, confirmed on Tuesday that two now former employees were involved in a massive data leak case in which more than 150,000 CVs–written summaries of people’s education and work experience–were copied from the platform. The company said it would crack down on such illegal activities. The Beijing-based company said that it became aware of the CV leak last June after noticing that CVs from its website were being sold on Taobao, China’s largest e-commerce platform. The case bubbled up again in Chinese media earlier this week because the two former Zhaoping mployees were on trial for selling as much as 160,000 CVs illegally obtained from the platform. CVs are attractive documents to buy in bulk, because they typically also contain personal information such as contact numbers and addresses. Salespeople could buy these CVs to find potential high-net worth customers, and so forth. Zhaoping said it reported the case to the police immediately at that time and that it cooperated with the investigation. Two employees at its Shanghai subsidiary were then taken in for questioning in August 2018. The two identified with only their surnames, Lu and Wang, helped another suspect, Zheng forge a business license and get access to CVs on the platform. Zheng then put the CVs on Taobao for sale. Each CV was sold around RMB 5 (USD 0.73).