What are the classic cases of network privacy leakage in recent years?

For example, 2065438+March 22, 2007 Wuyun. Com, a well-known vulnerability reporting platform in China, released the information about "Ctrip's secure payment calendar leads to the disclosure of user bank card information". The vulnerability finder pointed out that Ctrip has opened the debugging function of the service interface for processing user payment, so that all data packets transmitted to the bank verification cardholder interface are directly stored in the local server.

The encryption level of this information is not high enough, and it is easy for hackers to obtain it. The leaked information includes the user's name, ID card, bank card type, card number, CVV code and 6-digit password for payment.

relevant information

Personal information mainly includes the following categories:

1. Basic information. Personal basic information, including name, gender, age, ID number, telephone number, email address, home address, and sometimes even relatively private personal basic information such as marriage, belief, occupation, work unit, income, medical record and birth.

2. Equipment information. Mainly refers to the basic information of various computer terminal devices (including mobile and fixed terminals), such as location information, Wifi list information, Mac address, CPU information, memory information, SD card information, operating system version, etc.

3. Account information. It mainly includes online banking accounts, third-party payment accounts, social accounts and important email accounts.