For months, someone may have been syphoning data out of one of China’s most powerful computing hubs.

The alleged breach centres on the National Supercomputing Center in Tianjin, a major infrastructure platform that supports thousands of research institutions, universities, and government agencies across China. According to reporting from CNN, a hacker under the alias FlamingChina says they extracted more than 10 petabytes of data from the facility, a volume so large that few organisations outside governments could realistically analyse it.

The hacker posted sample files on Telegram earlier this year, suggesting the trove includes material from aerospace engineering projects, defence research, bioinformatics work, and advanced simulations. Among the organisations allegedly linked to the dataset are the Aviation Industry Corporation of China and the National University of Defense Technology.

Cybersecurity specialists who reviewed the sample told CNN that the files are possibly from a national supercomputing facility. “They’re exactly what I would expect to see from the supercomputing center,” said Dakota Cary. Large research projects, he explained, often rely on shared supercomputing infrastructure because building that capacity internally is expensive and impractical.

What makes the claim striking is not only the data itself but also the method behind the alleged theft. According to a researcher, access may have started with a compromised VPN domain. Once inside, the attacker may have deployed a distributed extraction system, effectively spreading the downloads across multiple machines so that no single transfer looked suspicious.

“That approach reduces the chance that defenders notice anything unusual,” Cary explained. Smaller, scattered data transfers tend to blend into normal network activity.

If accurate, the scale could be staggering. One petabyte equals roughly 1,000 terabytes, meaning the alleged breach could hold millions of documents, simulations, and technical files. For intelligence services around the world, that kind of dataset carries obvious strategic value.

The episode also touches on a broader tension. China has invested heavily in high-performance computing and artificial intelligence infrastructure, competing with the United States for technological leadership. Yet cybersecurity weaknesses have repeatedly surfaced across both public and private sectors.

One example came in 2022, when a massive database containing personal records of hundreds of millions of Chinese citizens surfaced online after being left unsecured.

XP95 Hacks South Africa’s Stats SA, Demands $100,000 Ransom
The group is demanding $100,000 from the South African government to prevent the data from being publicly exposed.