受访的安全公司的人说
\> The Shanghai police records ... were stored securely... But a dashboard for managing and accessing the data was set up on a public web address and left open without a password, ...
\> The database stayed exposed for more than a year, from April 2021 through the middle of last month, when its data was suddenly wiped clean and replaced with a ransom note for the Shanghai police to discover ...
上个月就被勒索 10btc，但直到闹出新闻后门才被关掉
\> The dashboard acted like an open door to the data vault, they say, which wasn’t closed—even after all the data went missing—until the vulnerability began gaining widespread public attention.
关于2020年CSDN那个在注释泄露凭证的帖子，受访者说后门根本不需要凭证
\> Mr. Troia and Mr. Diachenko said the database, based on its configuration, in fact didn’t need access credentials at all, making that theory unlikely. The fault was with the person who set up the dashboard, they said.
受访的两位安全研究员都验证了卖数据者的23T数据涵盖了1 billion 个人。一份名为 "person_address_label_info_master" 的文件有近9亿7千万行数据，根据描述应该就是指个人信息那张表。也就是还有几亿人的信息没在里面。
