Article summary: Recently, the Sichuan Internet Security Department discovered during daily inspections that a ticket purchase management system developed by a Chengdu technology company had serious network security vulnerabilities. Because the company failed to implement network security protection requirements as required, some data within the system was leaked.
Recently, the Sichuan Internet Security Department discovered during daily inspections that a ticket purchase management system developed by a Chengdu technology company had serious network security vulnerabilities. Because the company failed to implement network security protection requirements as required, some data within the system was leaked. The leaked data was used by criminals to commit illegal and criminal activities.
After police investigation and verification, the technology company, as the development entity and actual operating unit of the information system involved, has legal responsibilities for network security protection in accordance with the law. However, the company failed to strictly fulfill its network security protection obligations stipulated in the "Cybersecurity Law of the People's Republic of China". Specifically, it failed to implement a network security level protection system and failed to take necessary technical protection measures. Multiple protection deficiencies ultimately led to this data leakage.
In response to the company's illegal activities, the Sichuan Public Security and Cybersecurity Department has imposed corresponding administrative penalties on the companies involved and those directly responsible in accordance with relevant laws and regulations.
The Internet Police hereby solemnly remind you that Article 21 of the "Cybersecurity Law of the People's Republic of China" clearly stipulates that network operators must effectively perform security protection obligations in accordance with the requirements of the network security level protection system. The core of this obligation is to protect the network from interference, destruction or unauthorized access, and to prevent network data from being leaked, stolen or tampered with. Network operators should take this as a warning, strictly abide by legal regulations, and build a strong network security defense line.
(Source: Cyber Security Bureau of the Ministry of Public Security)
Previous article : How to prevent corporate data leakage in the AI era?
Insight Eye MIT System
Hebei Public Network Security No. 13019902001038
