Chinese police are investigating a significant leak of documents from a private security contractor, I-Soon, linked to China's top policing agency and government. The leaked documents reveal hacking tools used to spy on both Chinese and foreigners, with apparent targets including ethnic minorities and dissidents in regions such as Hong Kong and Xinjiang. The leak, which includes contracts, marketing presentations, and client lists, exposes methods used by Chinese authorities to surveil dissidents overseas, hack other nations, and promote pro-Beijing narratives on social media.
The leaked material shows I-Soon's hacking activities across Central and Southeast Asia, Hong Kong, Taiwan, and beyond. Analysts consider it the most significant leak ever linked to a company suspected of providing cyber espionage services for Chinese security services. The leaked documents also reveal databases of hacked data sold to Chinese police, with clients including governments, telecommunications firms abroad, and online gambling companies in China.
The source of the leak is unknown, and both I-Soon and Chinese police are investigating. The company's website, which previously listed clients including the Ministry of Public Security, is now offline. I-Soon's Chengdu subsidiary remains open, with employees seen entering and leaving the building as usual. The leaked documents suggest I-Soon's tools are used by Chinese police to monitor dissent on overseas social media and flood them with pro-Beijing content.
Experts speculate that the leak could be the work of a rival intelligence service, a dissatisfied insider, or a rival contractor. The leaked data indicates that I-Soon's sponsors include the Ministry of State Security and China's military, the People's Liberation Army. The leak has raised concerns about the extent of Chinese surveillance and cyber espionage activities, with implications for countries across the region and beyond.
themes: China
