On June 5, China’s Ministry of State Security issued a serious warning about the dangers posed by foreign spies targeting cloud data. This announcement, shared on the ministry’s official WeChat account, described cloud data as a “major focus of foreign spy agencies.”
Foreign Spies Targeting Cloud Data
The Ministry of State Security explained how foreign spies are actively attempting to steal crucial information stored in the cloud. These spies use cyberattacks and plant harmful software like Trojan horse viruses to break into cloud storage systems. These actions are not only a threat to personal privacy but also pose significant risks to national security.
The ministry pointed out that some government officials have been careless, storing secret information on cloud platforms without adequate security measures. While the ministry did not provide specifics about any espionage incidents or the exact punishments handed out, it made it clear that those officials were disciplined for their “weak security awareness.”
To counter these threats, the ministry advised government officials and employees who handle classified information to avoid using the Internet, mobile phones, and cloud storage services for storing, processing, or discussing confidential data. If cloud storage must be used, they recommended several precautions: disabling sharing options, encrypting documents, changing passwords frequently, and turning off automatic backups.
In addition to these recommendations, the ministry reminded everyone about existing laws concerning state secrets and data security. They urged the public and government departments to stay vigilant, understand their responsibilities, and take necessary steps to protect sensitive information.
Cloud Services and Potential Impacts
The ministry’s warning did not single out any specific cloud service providers as particularly vulnerable. However, it is well-known that Chinese companies dominate the cloud services market within China. Alibaba Cloud, Huawei Cloud, Tencent Cloud, and Baidu AI Cloud collectively account for 79% of the market share. American companies like Amazon Web Services (AWS) and Microsoft Azure also have a presence in China, albeit smaller.
This directive from the Ministry of State Security could potentially create challenges for cloud service providers, though the full extent of the impact remains uncertain.
This warning is part of China’s broader initiative to prevent the leakage of sensitive information. Previous directives have emphasized that secret documents should not be taken out of workplaces and that state secrets should not be transmitted via mobile phones. The ministry has made it clear that any actions endangering national security will face legal consequences.
China has established a series of rules and regulations to counter foreign spy activities. For instance, in 2021, China introduced a comprehensive data security law that penalizes companies for sending national “core data” abroad without Beijing’s approval. This law also requires government departments to maintain confidentiality and adhere to regulatory responsibilities. The term “core data” is broadly defined, covering information related to national and economic security, public welfare, and key public interest matters.
Strengthened Anti-Spy Laws and Increased Vigilance
Last July, China updated its anti-espionage law to expand the definitions of espionage and enhance the investigative powers of state security agencies. Additionally, a revised law on protecting state secrets came into effect last month, incorporating over a dozen new provisions to broaden its scope and strengthen its enforcement.
Over the past year, the Ministry of State Security has increased its activity on social media platforms to warn the public about foreign spy threats, educate them about security measures, and encourage the sharing of information regarding suspicious activities. Earlier this week, the ministry highlighted a case involving a foreign intelligence agency to underscore the severity of the threat.
In April, the Ministry of State Security outlined its commitment to safeguarding both traditional security areas—such as political, economic, and military security—and non-traditional areas, including biosecurity, data security, and artificial intelligence. The ministry also warned about other potential risks, including foreign non-governmental organizations and foundations that might steal “environmental data” from China under the guise of research and environmental protection.
Last month, the ministry issued a warning about foreign espionage agencies targeting China’s rare-earth industry. These agencies are reportedly involved in theft and sabotage, posing a significant threat to the security of China’s natural resources. In response, the Ministry of State Security vowed to crack down on these illegal activities to protect national security and ensure the sustainable development of the rare-earth industry.
China’s anti-espionage efforts highlight the ongoing and evolving threat posed by foreign spies and underscore the importance of rigorous data security measures to protect national interests.
