China's Ministry of public security, root out the "inner demons": your personal banking information 60 Yuan a can sell-privacy, banks, fraud-IT information
10 minute phone someone, 60 Yuan to obtain a person's banking information ... ... Recently, directed by the Chinese Ministry of public security, the public security organs uncovered a King across 25 provinces in case of violations of citizens ' personal information, suspects 201, eradicate 42 source information leakage, destroyed 9 in connection with the vast, people involved, information quantity, types and amount of money involved the infringement of citizens ' personal information to criminal gangs.
"Xinhua viewpoint" investigative journalism found, in this case, including bank employees, telecommunications workers, express delivery staff, air ticketing points leader, becomes the main suspect of leaking.
Small groups leading the "nine lines" black platforms
On November 11, 2015, the Shenyang Public Security Bureau Criminal Investigation Bureau found at work, there was a gang of illegal buying and selling of personal information online. Police found the gang behind an organization led a large criminal groups, membership in multiple provinces.
"At present, the basic identification of the alleged violations of citizens ' personal information and its derived nine lines of the crime situation. "Shenyang Public Security Bureau Criminal Investigation Bureau Director puqiang said. According to reports, the so-called green refers to the different types of violations of citizens ' personal information crime chain. Nine green to green principals named micro-or QQ, namely's "something to say" green, "the Hunter" line, "a new" green, "serve the people" line, "SkyNet" green, "Bodhi" green, "Pizza Hut" green, "eagle eye" lines, "multiple identities" line.
Each line is a separate chain, top down, above, the query, which is the source of the disclosure of personal information of citizens, comprising Bank staff, telecommunications staff, head of courier company employee, air ticket, etc. Next is the "dealer" as an agent, is the main suspect of chain; further down are various levels of distributors and users. "No direct contact between the upper and lower lines of each chain, linked to the transaction, are conducted on the Internet. "The police said.
It is understood that the nine lines covering almost all of citizens ' personal information, such as vehicle and flight information, bank account information, etc. Nine Green is an independent, cross each other, formed a close contact, clear framework crime group. Queries between independent agents provide crossing service. Significant characteristics of information exchange between agents, more frequent contact and micro-tools such as letters, forming a collaboration of black platforms.
Participation in many arrests of the Shenyang Public Security Bureau Criminal Investigation Bureau police Han Xu told reporters that over Shenyang police suspect there are queries and 34 others, an agent of 8 people, two agents 12; query volume up more than 300 queries daily, from hundreds of suspect transactions amount to thousands of Yuan. "Hunter" in green, an agent a more micro letter envelopes a month cash flow will reach 380,000 yuan.
And telecommunication employees colluding with "professional looking for someone", the bank clerk 60 Yuan to resell a customer information
"New" hotline is Shenyang police destroyed nine lines in one of the greatest, QQ is named "new" an agent is the prime suspect in this line.
On September 23, the reporter met 29-year old Zhang at the detention center. He said that had been selling cell phones on Taobao, 2014 a chance to know the "cell phones" and "professional looking for someone" in this business, is making money. From 2015 onwards, he began to rely on someone's personal information, and then hands down the resale profit.
"My main mobile phone positioning to help collect someone, help catch ' mistress ', generally 10 minutes to fix. "Zhang said home provided a mobile phone number to get his QQ provide the phone number to" home "--that is, relevant departments of the technical staff. After a few minutes, home phone number and the matching base station code given to him, he again through a specialized software can lock to find the exact location of the object. "Mobile location within 200 metres. "He said.
Participation in "as new" dedicated to the detection of the municipal Public Security Bureau of Shenyang Yuhong branch of Interpol confirmed trial section chief Meng Qinghui, a powerful paper cell phones ring, if we can find him, basic can do the trick.
In addition to cell phones, Zhang also purchase of bank customer information, increases sell two agents. As the crime he sale of 10,000 pieces, illicit profit of 100,000 yuan. On May 19 this year, Zhang arrested in Guangzhou.
Xu Zhang online Ching was a VIP counter staff of the agricultural Bank of China branch in Ganzhou city, Jiangxi province, last year in helping the lawyer friend after querying a customer bank information, tempted to start much-query the sale of customer information, mainly the card number, balance, sold for every 60 to 90 Yuan.
"Serving the people" line, 27 queries a Beijing technology company staff, business location services. According to the account, he colluded with China Unicom, a staff member of the company, Unicom mobile phone location query port opened, making phone location platform, link aliyun rented server. A query as administrator Unicom mobile phone location information, preliminary verification of illicit profit of 130,000 yuan.
Implementation of supervision system in place should be loopholes to prevent the "inner demons"
China's Ministry of public security Criminal Investigation Bureau Deputy Director Chen Shiqu, violations of citizens ' personal information in nearly period of rampant crime, which across 25 provinces in case of infringement of citizens ' personal information was uncovered in recent years one of the extra cases of violations of citizens ' personal information. Cracked the case reflects the public security organ resolutely combat this crime's confidence and determination to combat infringement of citizens ' personal information, as well as a series of criminal activities derived from its.
Deputy Director of the Public Security Bureau in Shenyang, Liaoning province, said Deng Wanhong, during the process of investigation, found some problems in the industry authorities in the supervisory process, such as the supervisory system implemented well enough, leading to internal staff become important accomplice of criminal gangs.
Found in in an interview with reporters, the case exposes the current banks, insurance companies and other financial systems have become citizens hardest hit by leaks of personal information. In addition, the express delivery company, ticket agencies, also becoming the focus areas of disclosure of personal information. "Disclosure of personal information of citizens is not a technical issue, but a question of attitude, a management problem. "Liaoning province lawyer's Association member Chen Baolong said priority should accelerate the pace of legislation, no matter what unit or Department, as long as the disclosure of personal information to take responsibility.
Meanwhile, internal control mechanisms should also be further improved. Tanmoupeng Yi、yijia express company staff said of the suspects in the case, each time when querying customer information, can select the right angles away from the overhead camera, coupled with insufficient permission to institutional constraints, their effort will be able to find the time a lot of access to personal information.
Some of the professionals interviewed said, "the most solid fortress is to attack from within", even if the personal information protection system and refining industry "inner demons" is always very hard to prevent "inner demons" violation of personal information, there is lack of effective response measures. "In recent years, public security organs to repeatedly focused on combating the crime of infringement of citizens ' personal information, a number of industry ' ghost ' arrest, to a certain extent curb the high trend of the information leak. "Chen Baolong suggested that in the long run, industry needs to be filled as soon as possible the responsibility of information security management vulnerabilities.
中国公安部揪出各行业“内鬼”：你的个人银行信息60元一条就能卖 - 隐私,银行,诈骗 - IT资讯
10分钟手机定位找人，60元获得一个人的银行信息……近期，在中国公安部直接指挥下，公安机关破获了一个跨25省区市的特大侵犯公民个人信息案，抓获犯罪嫌疑人201名，铲除42个信息泄漏源头，摧毁了9个涉案地域广、涉案人员多、信息数量、种类及涉案金额大的侵犯公民个人信息犯罪团伙。
“新华视点”记者调查发现，在此案中，包括银行职员、电信人员、快递公司职员、航空售票点负责人等，成为信息泄露的主要犯罪嫌疑人。
小团伙牵出“九条专线”的黑色交易平台
2015年11月11日，沈阳市公安局刑侦局在工作中发现，网上有一个非法倒卖公民个人信息的团伙。警方顺藤摸瓜发现该团伙背后存在一个组织庞大、成员遍及多个省区市的犯罪集团。
“目前，基本查明了涉嫌侵犯公民个人信息及其衍生犯罪九条专线的情况。”沈阳市公安局刑侦局局长朴强说。据介绍，所谓专线是指侵犯公民个人信息的不同类别的犯罪链条。九条专线以专线主犯的微信或QQ名命名，分别是“浮沉有事说”专线、“猎人”专线、“成新”专线、“为人民服务”专线、“天网”专线、“菩提祖师”专线、“必胜客”专线、“鹰眼”专线、“多重身份”专线。
每一条专线都是独立的链条，自上而下，上面为查询员，这是公民个人信息泄露的源头，成员包括银行职员、电信人员、快递公司职员、航空售票点负责人等。接下来是“庄家”一样的一级代理商，是链条的主要嫌犯；再往下是不同层级的代理商及用户。“一般每个链条的上下线之间没有直接接触，从联系到交易，均在网上进行。”办案民警说。
据了解，上述九条专线几乎涵盖了公民个人信息的全部，比如车辆及航班信息、银行开户信息等。九条专线既独立又相互交叉，形成联系密切、架构清晰的作案集团。查询员之间相对独立，为代理商提供交叉服务。代理商之间信息交换特征明显，联系更为频繁，并通过微信等工具，形成了相互勾结的黑色交易平台。
参与多次抓捕行动的沈阳市公安局刑侦局民警韩旭告诉记者，移交沈阳警方的犯罪嫌疑人有查询员34人，一级代理商8人，二级代理商12人；查询员日查询量最大达到300条以上，犯罪嫌疑人日交易金额从几百元至几千元不等。在“猎人”专线中，一级代理商毛某越一个月的微信红包资金流转就达到38万元。
与电信员工勾结“专业找人”，银行职员60元倒卖一条客户信息
“成新”专线是沈阳警方摧毁的九条专线中最重头的一个，QQ名为“成新”的一级代理商张某文是这条专线的首要嫌犯。
9月23日，记者在看守所见到了29岁的张某文。他说，以前一直在淘宝卖手机，2014年一个偶然的机会知道了“手机定位”“专业找人”这一行当，挺赚钱。从2015年起，他开始靠获得他人个人信息、再倒手转卖获利。
“我主要做手机定位，帮助讨债的找人、帮抓‘小三’，一般10分钟就能搞定。”张某文说，要找人的下家提供手机号，他通过QQ把手机号提供给“上家”——即相关部门的技术人员。几分钟后，上家便把与该手机号匹配的基站码发给他，他再通过一个专门的软件就可以锁定要找对象的具体位置。“手机定位一般在200米范围内。”他说。
参与“成新”专线侦破的沈阳市公安局于洪分局刑警大队案审科副科长孟庆辉证实，张某文在手机定位圈的影响力很大，只要找到他，基本都能达到目的。
除了手机定位，张某文还购买银行客户信息，加价卖给二级代理商。截至案发，他共买卖信息1万条，非法获利10万元。今年5月19日，张某文在广州落网。
张某文的上线徐某菁原是农行江西省赣州市分行的一名VIP柜台员，去年在帮助律师朋友查询一名客户的银行信息后，受诱惑开始大肆查询贩卖客户信息，主要是卡号、余额，以每条60元至90元不等的价格售出。
在“为人民服务”专线中，27岁的查询员张某是北京一科技公司的工作人员，业务涉及定位服务。据交待，他与联通公司一名工作人员勾结，开通联通手机位置查询端口，制作手机定位平台，链接租用的阿里云服务器。张某以管理员的身份查询联通手机定位信息，初步核实非法获利13万元。
监督制度落实不到位应堵漏洞防范“内鬼”
中国公安部刑侦局副巡视员陈士渠表示，近一时期侵犯公民个人信息犯罪猖獗，这起跨25省区市的侵犯公民个人信息案，是近年来破获的特大侵犯公民个人信息案件之一。案件的破获体现了公安机关坚决打击这类犯罪的信心和决心，有力打击了侵犯公民个人信息以及由其衍生的一系列犯罪活动。
辽宁省沈阳市公安局副局长邓万宏表示，在侦办过程中，发现了一些行业主管部门在监管过程中存在的问题，比如监督制度落实得不够好，导致内部工作人员成为犯罪团伙的重要帮凶。
记者在采访中发现，此案暴露了当前银行、保险公司等金融系统已成为公民个人信息泄露的重灾区。另外，快递公司、售票机构等也日渐成为个人信息泄露的重点领域。“公民个人信息泄露不是一个技术问题，而是一个态度问题，一个管理问题。”辽宁省律师协会会员陈宝龙表示，当务之急，应当加快立法的速度，不论是什么样的单位或部门，只要泄露个人信息就要担责。
同时，内部防控机制也应进一步完善。此案犯罪嫌疑人之一、一家快递公司工作人员覃某鹏说，每次在查询客户信息时，都能选好角度躲开头顶上方的摄像头，再加上制度上的权限约束不够，自己不费力就能觅得时机大量查询个人信息。
一些受访的专业人士表示，“最坚固的堡垒都是从内部攻破的”，即使个人信息保护体系再完善，行业“内鬼”总是防不胜防，而防范“内鬼”侵犯个人信息，目前尚缺乏有效应对措施。“近年公安机关对侵犯公民个人信息犯罪进行了多次集中打击，一批行业‘内鬼’落网，在一定程度上遏制了信息泄露的高发态势。”陈宝龙建议，从长远看，行业信息安全管理亟待尽快补上责任漏洞。