Security Researcher Exposes Data Breach Risks for Major Chinese Companies
Security researcher Shou Chaofan has revealed that he purchased approximately 6TB of sensitive data from a prominent Chinese model relay station. This data includes critical credentials such as SSH keys, VPN configurations, Alibaba Cloud keys, and GitLab tokens. Chaofan claims that this information could allow access to the internal systems of 19 major Chinese companies, including Huawei and Xiaomi, as well as seven government-related agencies in China and the Commonwealth of Independent States (CIS).
The model relay station, which operates as an intermediary between users and AI models, captures complete plaintext requests and responses. If developers input sensitive credentials into the system, there is a risk that these records could be saved or sold, leading to potential leaks of company system keys. Chaofan has previously highlighted the dangers associated with relay stations, having co-authored a paper that tested 428 such stations and found instances of malicious code injection and unauthorized use of AWS test keys.
Chaofan is a co-founder of Fuzzland, a blockchain security company, and has a background in vulnerability and supply chain security research. Earlier this year, he identified a significant exposure of TypeScript source code in the Claude Code 2.1.88 release package, further emphasizing the ongoing security challenges in the tech industry.
© 2026 KLEA News. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.
Source: KLEA News