Also https://internet2-0.com/whitepaper/its-their-word-against-their-source-code-tiktok-report/

`Thomas Perkins, has revealed the excessive data collection of TikTok and that the app connects to mainland China based infrastructure. (We note that we put all of our research to TikTok for comment and verification. They refused to go on the record about the details of their China based infrastructure.)`

satup

> UPDATE: while there is definitely a breach, it is still work in progress to confirm the origin of data, could be a third party.

https://twitter.com/MayhemDayOne/status/1566753291983372290
https://nitter.it/MayhemDayOne/status/1566753291983372290

---

*TikTok denies security breach after hackers leak user data, source code*
https://www.bleepingcomputer.com/news/security/tiktok-denies-security-breach-after-hackers-leak-user-data-source-code/

cryptocoin

Edit 3: It's been 11 hours since the contact, about 1.37 billion entries have been pulled. DBeaver has crashed multiple times and we've left it running. It's "fetching rows" still. So I guess there's still more.

Considering the entries are from all over the world, it is unlikely we will sell or release this. Lastly, this data contains a lot of under aged people. Releasing such information, along with the data that is being stored without user's knowledge is so dire that we think it could spark something dangerous. Example: WeChat (Which is state owned) is within the same database as the TikTok DB (which claims not to give such information to their government).

Edit 4: There's another DB in the Oracle server we're in, it's called "cabinet cloud" and it's 34GB in total. No idea why it's here and what it's for, but we're releasing it because we don't think we'll need it.

https://i.gyazo.com/0a4f46a9b5b184fb60b2...b0f28b.mp4

Edit 5: Record count is at 1.6 billion is in total. This is just for the user record sheets.

Edit 6: We've downloaded the user information tables from the database. Looks like it's the system log now, which is 790GB.

Also, current user entries is 2.05 billion.

bitcoin

TikTok stores all backend source code on one Alibaba Cloud instance

Umm ... wow. 

> Edit 3: It's been 11 hours since the contact, about 1.37 billion entries have been pulled. DBeaver has crashed multiple times and we've left it running. It's "fetching rows" still. So I guess there's still more.
> Considering the entries are from all over the world, it is unlikely we will sell or release this. Lastly, this data contains a lot of under aged people. Releasing such information, along with the data that is being stored without user's knowledge is so dire that we think it could spark something dangerous. Example: WeChat (Which is state owned) is within the same database as the TikTok DB (which claims not to give such information to their government).

> Edit 4: There's another DB in the Oracle server we're in, it's called "cabinet cloud" and it's 34GB in total. No idea why it's here and what it's for, but we're releasing it because we don't think we'll need it.
> Here's the video of the tables:
> https://i.gyazo.com/0a4f46a9b5b184fb60b2...b0f28b.mp4

> Edit 5: Record count is at 1.6 billion is in total. This is just for the user record sheets.

> Edit 6: We've downloaded the user information tables from the database. Looks like it's the system log now, which is 790GB.
> Also, current user entries is 2.05 billion.

https://breached.to/Thread-TikTok-WeChat-breach