In one of the most staggering cyber intrusions reported in recent years, a hacker collective claims to have stolen 10 petabytes of classified data from China’s National Supercomputing Center (NSCC) in Tianjin, a facility central to Beijing’s military, aerospace and nuclear research.
If verified, the breach would represent one of the largest known data thefts from a state‑run scientific institution, raising serious questions about the resilience of China’s cyber‑defence systems.
The group calling itself “FlamingChina” has posted sample files on Telegram and dark‑web forums, claiming they infiltrated the NSCC through a compromised VPN domain.
Investigators say the attackers allegedly remained inside the network for six months, using a botnet to quietly siphon data without triggering alarms.
The NSCC operates the Tianhe‑1A supercomputer, a system used by thousands of Chinese defence and research agencies.
Preliminary samples circulating online suggest the stolen data includes:
- Hypersonic missile simulations and schematics
- Aerospace design files linked to major state‑run manufacturers
- Nuclear and fusion research models
- Internal documents from over 6,000 institutional clients
Cyber analysts say the material appears to be tied to China’s most sensitive strategic programmes, including next‑generation weapons development and advanced aircraft research.
Security experts warn that the leak could expose China’s technological vulnerabilities at a time when it is racing to achieve military and scientific parity with global rivals.
Some analysts quoted in international media reports say the breach could set back key research programmes by years if adversarial states gain access to the stolen files.
The incident also raises uncomfortable questions for Beijing:
Why did a facility built to reduce reliance on foreign technology remain exposed long enough for a multi‑petabyte extraction to go unnoticed?
Chinese authorities have not issued a formal statement.
Meanwhile, cybersecurity trackers say the full dataset is being advertised for sale for large cryptocurrency payments, with buyers reportedly offered access to raw research files, internal communications and simulation data.
For a government that has long projected its cyber infrastructure as impenetrable, the alleged breach has triggered global scrutiny.
If authenticated, the “FlamingChina” leak would mark one of the most consequential cyber incidents involving a major state power.
For now, the scale, sensitivity and geopolitical implications of the stolen data continue to unfold — and the global security community is watching closely.