The reporter learned from the Sichuan Provincial Public Security Department that behind these phenomena, most of them are illegal and criminal industrial chains, leaking and stealing personal information and data, and illegally using them to make huge profits.
/kloc-From June, the Cyber Security Law of the People's Republic of China (hereinafter referred to as the Cyber Security Law) will be formally implemented. This is the first basic law in China that comprehensively regulates the security management of cyberspace. On the one hand, it is important to crack down on preventing citizens' personal information and data from being illegally obtained, leaked or used-the industry "ghosts" who do such activities should be careful!
Focus on "citizens' personal information" and focus on protection.
On the eve of the implementation of the Cyber Security Law, the reporter interviewed relevant persons of the Cyber Security Corps of the Sichuan Provincial Public Security Department.
According to the relevant person of the Corps, the cyber security law is a basic law, and in the past, the norms in this respect were all rules and regulations. After it rose to law, it provided legal guarantee for better network security work.
This law not only clearly stipulates the protection of national network security and key information infrastructure, but also clearly "emphasizes" the protection of personal information in the protection of network data security-bringing the protection of network data security into the scope of national network security. Emphasis is placed on strengthening the protection of citizens' personal information to prevent citizens' personal information data from being illegally obtained, leaked or illegally used.
See details. Selling 50 pieces of personal information can be convicted.
After the formal adoption of the Cyber Security Law, the Supreme Law and the Supreme People's Procuratorate have made judicial interpretations on handling criminal cases of infringing citizens' personal information, and defined the definition of "citizens' personal information". In addition to name, ID number, contact information, address, account password and property status, the track of whereabouts is also in this category.
The judicial interpretation makes it clear that providing citizens' personal information to specific people and publishing citizens' personal information through information networks or other means should be recognized as "providing citizens' personal information" as stipulated in the criminal law. Not only is it illegal to buy and sell citizens' personal information, but the exchange of citizens' personal information between real estate agents has also constituted an act of infringing citizens' personal information. For the standard of "serious circumstances" in the relevant provisions of the Criminal Law, the judicial interpretation clearly stipulates 10 conviction cases, including illegally obtaining, selling or providing more than 50 pieces of information such as whereabouts, communication content, credit information and property information; Illegally obtaining, selling or providing more than 500 pieces of citizens' personal information such as accommodation information, communication records, health and physiological information and transaction information, which may affect personal and property safety; Illegally obtaining, selling or providing more than 5,000 pieces of personal information of citizens other than those specified in the preceding two paragraphs; The illegal income is more than 5000 yuan.
Severely crack down on Sichuan, 18 "insiders" in the industry have been arrested.
A related person from the Cyber Security Corps of the Sichuan Provincial Public Security Department told the reporter that after the cyber security law was formally passed, the Sichuan police organized a special campaign to crack down on hacker attacks and cyber violations of citizens' personal information on 20 17, in order to severely crack down on cyber attacks, safeguard citizens' personal information security and strengthen network data protection.
Through multi-police intelligence management, we will dig up clues, crack down on the source of citizens' information leakage, and focus on investigating cases in which party and government organs, enterprises and institutions such as finance, telecommunications, transportation, education, medical care, social security, civil affairs, and internet service providers deliberately disclose citizens' personal information.
Up to now, 52 criminal clues1have been collected to teach hacking techniques and provide hacking tools; 485 clues of infringing citizens' personal information were collected and excavated, and "insiders" 18 people in the industry were arrested. At the same time, more than 20,000 pieces of illegal and harmful information1.20 were cleared, 5 websites were shut down, and more than 80,000 pieces of instant messaging numbers1.80 were blocked, effectively deterring criminals.
Typical case |
Chengdu privately exported the owner's real estate data, making a profit of one million.
Recently, the Netan detachment of Chengdu Public Security Bureau found that some netizens were selling citizens' real estate data online. By further combing and expanding the line, they destroyed a gang that violated citizens' personal information with Deyang "Liang Mou" and "Shen Mou" as data sources, Chengdu Zhongmou and Xiao Moxi as intermediaries, and Chengdu "Lin Mohong", "Li" and "Yang Moujun" as offline.
Upon examination, some people took advantage of their position to export the owner's property data of some housing authority systems that their company is responsible for maintaining privately and sell them to the middleman clock at the price of each set of 3.5 yuan. Later, Zhong sold it to people in real estate agencies, decoration companies, real estate companies and other industries at the price of 5 yuan for commercial promotion, and initially verified the amount involved 1 10,000 yuan.
More than 300,000 pieces of personal information of Mianyang gang were leaked.
Recently, Mianyang City Public Security Bureau Netan Detachment and Zitong County Public Security Bureau Netan Brigade cracked the case of "1 1.28" infringing citizens' personal information. Up to now, * * * has arrested two suspects 12, seized seven computers, three USB flash drives and three mobile phones 13, and confiscated more than ten thousand pieces of citizens' personal information 1 10,000.
After investigation, the criminal suspect Pumou illegally stole a large number of citizens' personal information by taking advantage of his work in an advertising company, a commercial bank and a life insurance company in Mianyang, and got to know many people such as Jiang Moumou and Lai Moumou through the company's "work" and online chat tools, sold citizens' personal information to each other through third-party payment, and then sold citizens' personal information to personal credit reporting companies, house decoration companies, vehicle after-sales companies and other industries through his own channels, and gradually developed into a family. During the period from 20 15 to 20 16, 1 1, the criminal gang illegally sold and exchanged personal information of citizens such as "Mianyang real estate", "owner information", "enterprise legal person information" and bank credit information to others, each piece/kloc.
Luzhou illegally obtained computer information system data.
On August 20 16, the Netan detachment of Luzhou Public Security Bureau received a report that "Shoux people's website" can query citizens' personal information. A preliminary investigation by Netan police found that the website contains more than 380 kinds of information and data, including student information, citizens' accommodation, mobile phone owners and so on. , totaling tens of billions, successfully highlighted a criminal gang that illegally obtained computer information system data and illegally infringed on citizens' personal information.
After investigation, from 2065438 to February 2006, Yang Moudong and others rented a house in Chengdu, purchased the domain name server and CDN cloud acceleration service from the Internet, established the Shoux people's social work library website, sorted out the illegally obtained information and data, and then imported them into the server, established an online chat group, conducted online publicity, sought buyers, and sold the website activation code at a price ranging from 200- 1000 yuan. Yang Moudong is responsible for illegally obtaining citizens' personal information, and Yang is responsible for purchasing domain name servers and CDN cloud acceleration services from the Internet to build the Shoux people's social library website, while maintaining the server; Several other suspects are responsible for promoting, publicizing and selling the website activation code online through online chat groups, and collecting money through third-party payment. Since 2065438+ February 2006, gangs have made illegal profits of more than 65438+10,000 yuan by selling activation codes. Up to now, eight suspects have been arrested in this case, and hundreds of millions of pieces of information and data illegally obtained by fixed suspects have been extracted. (Reporter Li Fengchun Intern Zhong Xiaotong)