The hacker provided a sample of the data including the phone numbers, names, identification numbers and health code status of 47 people. AFP
The hacker provided a sample of the data including the phone numbers, names, identification numbers and health code status of 47 people. AFP
The hacker provided a sample of the data including the phone numbers, names, identification numbers and health code status of 47 people. AFP
The hacker provided a sample of the data including the phone numbers, names, identification numbers and health code status of 47 people. AFP

Hacker offers to sell data of 48.5 million users of Shanghai's Covid app


  • English
  • Arabic

A hacker claims to have obtained the personal information of 48.5 million users of a Covid health mobile app run by the city of Shanghai, the second claim of a breach of the Chinese financial hub's data in a little more than a month.

The hacker, using the username “XJP”, posted an offer to sell the data for $4,000 on Breach Forums on Wednesday.

The person provided a sample of the data including the phone numbers, names, identification numbers and health code status of 47 people.

Eleven of the 47 people reached by Reuters confirmed they had been listed in the sample, though two said their identification numbers were wrong. Reuters was unable to further verify the authenticity of the hacker's claim.

The true size and nature of these kinds of data hacks is sometimes overstated by the seller in an attempt to make a quick profit.

“This [database] contains everyone who lives in or visited Shanghai since Suishenma's adoption,” XJP said in the post, which originally asked for $4,850 before lowering the price later the same day.

Suishenma is the Chinese name for Shanghai's health code system, which the city of 25 million people established in early 2020 to combat the spread of Covid-19. All residents and visitors have to use it.

The app collects travel data and gives users a red, yellow or green rating indicating the likelihood of having contracted the virus. The code has to be shown to enter public venues.

The data is managed by the city government and users can access Suishenma either by downloading the app or opening it using the Alipay app, which is owned by FinTech company and Alibaba affiliate Ant Group as well as Tencent Holdings' WeChat app.

The Shanghai government, Ant and Tencent did not immediately respond to requests for comment. XJP declined to comment when reached on Breach Forums.

“I'm not ready to answer questions yet as I have a lot more to drop,” XJP said.

The purported Suishenma breach comes after a hacker last month claimed to have procured 23 terabytes of personal information belonging to one billion Chinese citizens from the Shanghai police.

That hacker also offered to sell this data on Breach Forums.

The first hacker was able to steal data from the police as a dashboard for managing a law enforcement database had been left open on the public internet without password protection for more than a year, The Wall Street Journal reported, citing cyber security researchers.

The newspaper said the data had been hosted on Alibaba's cloud platform and that Shanghai authorities had summoned company executives over the matter.

The Shanghai government, police and Alibaba have yet to comment on the police database issue.

Chinese regulatory bodies have in the past two years announced a barrage of new rules strengthening oversight over the private sector's management of user data after years of complaints by residents of how their personal data could be easily stolen or sold.

A screenshot of XJP's offer on Breach Forums went viral on Chinese social media on Friday, prompting several Weibo users to weigh in on the latest leak and its broader implications, as well as question what sort of action would be taken.

“Data leaks in China are really no longer uncommon news,” said one user.

GAC GS8 Specs

Engine: 2.0-litre 4cyl turbo

Power: 248hp at 5,200rpm

Torque: 400Nm at 1,750-4,000rpm

Transmission: 8-speed auto

Fuel consumption: 9.1L/100km

On sale: Now

Price: From Dh149,900

Brief scores:

Juventus 3

Dybala 6', Bonucci 17', Ronaldo 63'

Frosinone 0

Mercer, the investment consulting arm of US services company Marsh & McLennan, expects its wealth division to at least double its assets under management (AUM) in the Middle East as wealth in the region continues to grow despite economic headwinds, a company official said.

Mercer Wealth, which globally has $160 billion in AUM, plans to boost its AUM in the region to $2-$3bn in the next 2-3 years from the present $1bn, said Yasir AbuShaban, a Dubai-based principal with Mercer Wealth.

Within the next two to three years, we are looking at reaching $2 to $3 billion as a conservative estimate and we do see an opportunity to do so,” said Mr AbuShaban.

Mercer does not directly make investments, but allocates clients’ money they have discretion to, to professional asset managers. They also provide advice to clients.

“We have buying power. We can negotiate on their (client’s) behalf with asset managers to provide them lower fees than they otherwise would have to get on their own,” he added.

Mercer Wealth’s clients include sovereign wealth funds, family offices, and insurance companies among others.

From its office in Dubai, Mercer also looks after Africa, India and Turkey, where they also see opportunity for growth.

Wealth creation in Middle East and Africa (MEA) grew 8.5 per cent to $8.1 trillion last year from $7.5tn in 2015, higher than last year’s global average of 6 per cent and the second-highest growth in a region after Asia-Pacific which grew 9.9 per cent, according to consultancy Boston Consulting Group (BCG). In the region, where wealth grew just 1.9 per cent in 2015 compared with 2014, a pickup in oil prices has helped in wealth generation.

BCG is forecasting MEA wealth will rise to $12tn by 2021, growing at an annual average of 8 per cent.

Drivers of wealth generation in the region will be split evenly between new wealth creation and growth of performance of existing assets, according to BCG.

Another general trend in the region is clients’ looking for a comprehensive approach to investing, according to Mr AbuShaban.

“Institutional investors or some of the families are seeing a slowdown in the available capital they have to invest and in that sense they are looking at optimizing the way they manage their portfolios and making sure they are not investing haphazardly and different parts of their investment are working together,” said Mr AbuShaban.

Some clients also have a higher appetite for risk, given the low interest-rate environment that does not provide enough yield for some institutional investors. These clients are keen to invest in illiquid assets, such as private equity and infrastructure.

“What we have seen is a desire for higher returns in what has been a low-return environment specifically in various fixed income or bonds,” he said.

“In this environment, we have seen a de facto increase in the risk that clients are taking in things like illiquid investments, private equity investments, infrastructure and private debt, those kind of investments were higher illiquidity results in incrementally higher returns.”

The Abu Dhabi Investment Authority, one of the largest sovereign wealth funds, said in its 2016 report that has gradually increased its exposure in direct private equity and private credit transactions, mainly in Asian markets and especially in China and India. The authority’s private equity department focused on structured equities owing to “their defensive characteristics.”

UAE currency: the story behind the money in your pockets
ENGLAND%20SQUAD
%3Cp%3E%3Cstrong%3EGoalkeepers%3C%2Fstrong%3E%20Pickford%20(Everton)%2C%20Pope%20(Newcastle)%2C%20Ramsdale%20(Arsenal)%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EDefenders%3C%2Fstrong%3E%20Chilwell%20(Chelsea)%2C%20Dier%20(Tottenham)%2C%20Guehi%20(Crystal%20Palace)%2C%20James%20(Chelsea)%2C%20Maguire%20(Man%20United)%2C%20Shaw%20(Man%20United)%2C%20Stones%20(Man%20City)%2C%20Trippier%20(Newcastle)%2C%20Walker%20(Man%20City)%3Cbr%3E%3Cbr%3E%3Cstrong%3EMidfielders%20%3C%2Fstrong%3EBellingham%20(Dortmund)%2C%20Gallagher%20(Chelsea)%2C%20Henderson%20(Liverpool)%2C%20Maddison%20(Leicester)%2C%20Mount%20(Chelsea)%2C%20Phillips%20(Man%20City)%2C%20Declan%20Rice%20(West%20Ham)%3Cbr%3E%3Cbr%3E%3Cstrong%3EForwards%20%3C%2Fstrong%3EFoden%20(Man%20City)%2C%20Grealish%20(Man%20City)%2C%20Kane%20(Tottenham)%2C%20Rashford%20(Man%20United)%2C%20Saka%20(Arsenal)%2C%20Toney%20(Brentford)%3C%2Fp%3E%0A
MATCH INFO

Final: England v South Africa, Saturday, 1pm

THE CARD

2pm: Maiden Dh 60,000 (Dirt) 1,400m

2.30pm: Handicap Dh 76,000 (D) 1,400m

3pm: Handicap Dh 64,000 (D) 1,200m

3.30pm: Shadwell Farm Conditions Dh 100,000 (D) 1,000m

4pm: Maiden Dh 60,000 (D) 1,000m

4.30pm: Handicap 64,000 (D) 1,950m

UAE currency: the story behind the money in your pockets
THURSDAY FIXTURES

4.15pm: Italy v Spain (Group A)
5.30pm: Egypt v Mexico (Group B)
6.45pm: UAE v Japan (Group A)
8pm: Iran v Russia (Group B)

The specs
  • Engine: 3.9-litre twin-turbo V8
  • Power: 640hp
  • Torque: 760nm
  • On sale: 2026
  • Price: Not announced yet
The specs

Engine: 2.0-litre 4cyl turbo

Power: 261hp at 5,500rpm

Torque: 405Nm at 1,750-3,500rpm

Transmission: 9-speed auto

Fuel consumption: 6.9L/100km

On sale: Now

Price: From Dh117,059

RACE CARD

6.30pm: Madjani Stakes Group 2 (PA) Dh97,500 (Dirt) 1,900m
7.05pm: Maiden (TB) Dh82,500 (D) 1,400m
7.40pm: Maiden (TB) Dh82,500 (D) 1,600m
8.15pm: Handicap (TB) Dh87,500 (D) 2,200m
8.50pm: Dubai Creek Mile Listed (TB) Dh132,500 (D) 1,600m
9.25pm: Conditions (TB) Dh120,000 (D) 1,900m
10pm: Handicap (TB) Dh92,500 (D) 1,400m

Labour dispute

The insured employee may still file an ILOE claim even if a labour dispute is ongoing post termination, but the insurer may suspend or reject payment, until the courts resolve the dispute, especially if the reason for termination is contested. The outcome of the labour court proceedings can directly affect eligibility.


- Abdullah Ishnaneh, Partner, BSA Law 

COMPANY PROFILE
Name: Kumulus Water
 
Started: 2021
 
Founders: Iheb Triki and Mohamed Ali Abid
 
Based: Tunisia 
 
Sector: Water technology 
 
Number of staff: 22 
 
Investment raised: $4 million 
Captain Marvel

Director: Anna Boden, Ryan Fleck

Starring: Brie Larson, Samuel L Jackson, Jude Law,  Ben Mendelsohn

4/5 stars

The National Archives, Abu Dhabi

Founded over 50 years ago, the National Archives collects valuable historical material relating to the UAE, and is the oldest and richest archive relating to the Arabian Gulf.

Much of the material can be viewed on line at the Arabian Gulf Digital Archive - https://www.agda.ae/en

AWARDS
%3Cp%3E%3Cstrong%3EBest%20Male%20black%20belt%3A%20%3C%2Fstrong%3ELucas%20Protasio%20(BRA)%3Cbr%3E%3Cstrong%3EBest%20female%20black%20belt%3A%20%3C%2Fstrong%3EJulia%20Alves%20(BRA)%3Cbr%3E%3Cstrong%3EBest%20Masters%20black%20belt%3A%3C%2Fstrong%3E%20Igor%20Silva%20(BRA)%3Cbr%3E%3Cstrong%3EBest%20Asian%20Jiu-Jitsu%20Federation%3A%3C%2Fstrong%3E%20Kazakhstan%3Cbr%3E%3Cstrong%3EBest%20Academy%20in%20UAE%3A%20%3C%2Fstrong%3ECommando%20Group%2C%20Abu%20Dhabi%3Cbr%3E%3Cstrong%3EBest%20International%20Academy%3A%3C%2Fstrong%3E%20Commando%20Group%2C%20Abu%20Dhabi%3Cbr%3E%3Cstrong%3EAfrican%20Player%20of%20the%20Year%3A%20%3C%2Fstrong%3EKatiuscia%20Yasmira%20Dias%20(GNB)%3Cbr%3E%3Cstrong%3EOceanian%20Player%20of%20the%20Year%3A%20%3C%2Fstrong%3EAnton%20Minenko%20(AUS)%3Cbr%3E%3Cstrong%3EEuropean%20Player%20of%20the%20Year%3A%3C%2Fstrong%3E%20Rose%20El%20Sharouni%20(NED)%3Cbr%3E%3Cstrong%3ENorth%20and%20Central%20American%20Player%20of%20the%20Year%3A%20%3C%2Fstrong%3EAlexa%20Yanes%20(USA)%3Cbr%3E%3Cstrong%3EAsian%20Player%20of%20the%20Year%3A%20%3C%2Fstrong%3EZayed%20Al%20Katheeri%20(UAE)%3Cbr%3E%3Cstrong%3ERookie%20of%20the%20Year%3A%3C%2Fstrong%3E%20Rui%20Neto%20(BRA)Rui%20Neto%20(BRA)%3C%2Fp%3E%0A
New schools in Dubai
RESULTS

Time; race; prize; distance

4pm: Maiden; (D) Dh150,000; 1,200m
Winner: General Line, Xavier Ziani (jockey), Omar Daraj (trainer)

4.35pm: Maiden (T); Dh150,000; 1,600m
Winner: Travis County, Adrie de Vries, Ismail Mohammed

5.10pm: Handicap (D); Dh175,000; 1,200m
Winner: Scrutineer, Tadhg O’Shea, Ali Rashid Al Raihe

5.45pm: Maiden (D); Dh150,000; 1,600m
Winner: Yulong Warrior, Richard Mullen, Satish Seemar

6.20pm: Maiden (D); Dh150,000; 1,600m
Winner: Ejaaby, Jim Crowley, Doug Watson

6.55pm: Handicap (D); Dh160,000; 1,600m
Winner: Storyboard, Richard Mullen, Satish Seemar

7.30pm: Handicap (D); Dh150,000; 2,200m
Winner: Grand Dauphin, Gerald Mosse, Ahmed Al Shemaili

8.05pm: Handicap (T); Dh190,000; 1,800m
Winner: Good Trip, Tadhg O’Shea, Ali Rashid Al Raihe

Nancy 9 (Hassa Beek)

Nancy Ajram

(In2Musica)

Nepotism is the name of the game

Salman Khan’s father, Salim Khan, is one of Bollywood’s most legendary screenwriters. Through his partnership with co-writer Javed Akhtar, Salim is credited with having paved the path for the Indian film industry’s blockbuster format in the 1970s. Something his son now rules the roost of. More importantly, the Salim-Javed duo also created the persona of the “angry young man” for Bollywood megastar Amitabh Bachchan in the 1970s, reflecting the angst of the average Indian. In choosing to be the ordinary man’s “hero” as opposed to a thespian in new Bollywood, Salman Khan remains tightly linked to his father’s oeuvre. Thanks dad. 

Going grey? A stylist's advice

If you’re going to go grey, a great style, well-cared for hair (in a sleek, classy style, like a bob), and a young spirit and attitude go a long way, says Maria Dowling, founder of the Maria Dowling Salon in Dubai.
It’s easier to go grey from a lighter colour, so you may want to do that first. And this is the time to try a shorter style, she advises. Then a stylist can introduce highlights, start lightening up the roots, and let it fade out. Once it’s entirely grey, a purple shampoo will prevent yellowing.
“Get professional help – there’s no other way to go around it,” she says. “And don’t just let it grow out because that looks really bad. Put effort into it: properly condition, straighten, get regular trims, make sure it’s glossy.”

The lowdown

Badla

Rating: 2.5/5

Produced by: Red Chillies, Azure Entertainment 

Director: Sujoy Ghosh

Cast: Amitabh Bachchan, Taapsee Pannu, Amrita Singh, Tony Luke

The specs: 2019 Cadillac XT4

Price, base: Dh145,000

Engine: 2.0-litre turbocharged in-line four-cylinder engine

Transmission: Nine-speed automatic

Power: 237hp @ 5,000rpm

Torque: 350Nm @ 1,500rpm

Fuel economy, combined: 8.7L / 100km

Avatar: Fire and Ash

Director: James Cameron

Starring: Sam Worthington, Sigourney Weaver, Zoe Saldana

Rating: 4.5/5

Our family matters legal consultant

Name: Hassan Mohsen Elhais

Position: legal consultant with Al Rowaad Advocates and Legal Consultants.

UAE currency: the story behind the money in your pockets
No more lice

Defining head lice

Pediculus humanus capitis are tiny wingless insects that feed on blood from the human scalp. The adult head louse is up to 3mm long, has six legs, and is tan to greyish-white in colour. The female lives up to four weeks and, once mature, can lay up to 10 eggs per day. These tiny nits firmly attach to the base of the hair shaft, get incubated by body heat and hatch in eight days or so.

Identifying lice

Lice can be identified by itching or a tickling sensation of something moving within the hair. One can confirm that a person has lice by looking closely through the hair and scalp for nits, nymphs or lice. Head lice are most frequently located behind the ears and near the neckline.

Treating lice at home

Head lice must be treated as soon as they are spotted. Start by checking everyone in the family for them, then follow these steps. Remove and wash all clothing and bedding with hot water. Apply medicine according to the label instructions. If some live lice are still found eight to 12 hours after treatment, but are moving more slowly than before, do not re-treat. Comb dead and remaining live lice out of the hair using a fine-toothed comb.
After the initial treatment, check for, comb and remove nits and lice from hair every two to three days. Soak combs and brushes in hot water for 10 minutes.Vacuum the floor and furniture, particularly where the infested person sat or lay.

Courtesy Dr Vishal Rajmal Mehta, specialist paediatrics, RAK Hospital

Our legal columnist

Name: Yousef Al Bahar

Advocate at Al Bahar & Associate Advocates and Legal Consultants, established in 1994

Education: Mr Al Bahar was born in 1979 and graduated in 2008 from the Judicial Institute. He took after his father, who was one of the first Emirati lawyers

WTL%20SCHEDULE
%3Cp%3EDECEMBER%2019%20(6pm)%0D%3Cbr%3EKites%20v%20Eagles%0D%3Cbr%3EAliassime%20v%20Kyrgios%0D%3Cbr%3ESwiatek%20v%20Garcia%0D%3Cbr%3EEntertainment%3A%20Tiesto%3C%2Fp%3E%0A%3Cp%3EDECEMBER%2020%20(6pm)%0D%3Cbr%3EFalcons%20v%20Hawks%0D%3Cbr%3EDjokovic%20v%20Zverev%0D%3Cbr%3ESabalenka%20v%20Rybakina%0D%3Cbr%3EEntertainment%3A%20Wizkid%0D%3Cbr%3E%0D%3Cbr%3EDECEMBER%2021%20(6pm)%0D%3Cbr%3EFalcons%20v%20Eagles%0D%3Cbr%3EDjokovic%20v%20Kyrgios%0D%3Cbr%3EBadosa%20v%20Garcia%0D%3Cbr%3EEntertainment%3A%20Ne-Yo%0D%3Cbr%3E%0D%3Cbr%3EDECEMBER%2022%20(6pm)%0D%3Cbr%3EHawks%20v%20Kites%0D%3Cbr%3EThiem%20v%20Aliassime%0D%3Cbr%3EKontaveit%20v%20Swiatek%0D%3Cbr%3EEntertainment%3A%20deadmau5%0D%3Cbr%3E%0D%3Cbr%3EDECEMBER%2023%20(2pm)%0D%3Cbr%3EEagles%20v%20Hawks%0D%3Cbr%3EKyrgios%20v%20Zverev%0D%3Cbr%3EGarcia%20v%20Rybakina%0D%3Cbr%3EEntertainment%3A%20Mohammed%20Ramadan%0D%3Cbr%3E%0D%3Cbr%3EDECEMBER%2023%20(6pm)%0D%3Cbr%3EFalcons%20v%20Kites%0D%3Cbr%3EDjokovic%20v%20Aliassime%0D%3Cbr%3ESabalenka%20v%20Swiatek%0D%3Cbr%3EEntertainment%3A%20Mohammed%20Ramadan%0D%3Cbr%3E%0D%3Cbr%3EDECEMBER%2024%20(6pm)%0D%3Cbr%3EFinals%0D%3Cbr%3EEntertainment%3A%20Armin%20Van%20Buuren%0D%3Cbr%3E%0D%3C%2Fp%3E%0A
Top 10 in the F1 drivers' standings

1. Sebastian Vettel, Ferrari 202 points

2. Lewis Hamilton, Mercedes-GP 188

3. Valtteri Bottas, Mercedes-GP 169

4. Daniel Ricciardo, Red Bull Racing 117

5. Kimi Raikkonen, Ferrari 116

6. Max Verstappen, Red Bull Racing 67

7. Sergio Perez, Force India 56

8. Esteban Ocon, Force India 45

9. Carlos Sainz Jr, Toro Rosso 35

10. Nico Hulkenberg, Renault 26

Updated: August 12, 2022, 5:57 PM