Alipay Leak Cited Big Data From Whom To Manage?

< p > last week, Alibaba's Alipay caught the news of "inside ghost", and the news of leaking 20G user information broke out, which immediately aroused the concern of Alipay users. At present, the case is still being investigated. What data have the users lost? Is it safe to use Alipay for shopping, credit card repayment and "balance treasure" security? In the era of big data, how should we protect our information security? < /p >
< p > < strong > Alipay responded: < /strong > < /p >
< p > < strong > < a > href= > http://www.91se91.com/news/index_cj.asp > > sensitive data > /a > anyone can not get < /strong > /p >
< p > heard of the "Alipay leak" incident, many users are worried about their account security. Miss Zhu is a typical "Alipay control". She said, "I always use Alipay to pay for credit cards, buy things online, and recharge the phone. It can be said that my bank card number, credit card validity period, check code, password and other information are on top. If all kinds of information of Alipay is leaked, it will become a transparent person. < /p >
< p > what information does Alipay reveal? It is understood that Alipay former employee Li began downloading user data several times in 2010, content more than 20G, and repeatedly sold to the electricity supplier company and data company. At present, the information of the leak may contain the user's name, address, transaction record and so on. This information is sold to the target customers through content analysis and refinement, and gets a commercial consumption tendency. The head of Alipay's Public Relations Department responded that "the core information and technical personnel such as Alipay's transaction passwords, bank accounts and ID cards are not accessible. For these sensitive data, Alipay is all processed by advanced encryption technology, no matter whether it is before or after the event, no one can get it." < /p >
< p > in fact, how does the e-commerce website deal with our information? According to experts, shopping website records user information, first of all, from the external regulatory requirements. According to the requirements of the central bank and other central regulatory bodies, the relevant companies must retain their core identities, including names and ID numbers, and retain information such as consumer behavior and historical transaction records for more than 10 years. These requirements are mainly for trading safety - preventing illegal transactions on the Internet from damaging public interests. And consumer behavior, historical transactions and other information for the electricity supplier industry is also a key resource. Therefore, the information of these two modules is the key protection information of the electric business enterprise, and the customer's credit card number and use period will not be retained in the database. < /p >
< p > < strong > information trafficking < /strong > /p >
< p > < strong > has formed industrial chain < /strong > < /p >.
< p > "for businesses, the purchase of user information is almost the lowest cost, and the most efficient marketing means. And if the information has been excavated and packaged for two times, the price will be higher. A higher value user information can even be sold to tens of dollars. According to experts from the China Association of electronic business promotion, the valuable user information is broadly divided into two categories, including user's name, age, gender, contact information and other basic information, as well as user's consumption records and other business information. < /p >
< p > "basic information is generally purchased for spam messages and telemarketing. And business information can be achieved through data analysis, processing and mining precision marketing, more commercial application value. Earlier, because of less concern, some people even peddled on Taobao. With the stricter supervision in recent years, the company that sells information has the image of precision marketing and data marketing. < /p >
< p > nowadays, while the Internet is attacking the financial industry and refreshing the financial management concept of the society, Alipay users' information leakage incidents can be described as a cold water. The problem of network third party payment and network financial security is emerging again. < /p >
< p > < strong > information leakage < /strong > < /p >
< p > < strong > < a > href= > http://www.91se91.com/news/index_cj.asp > > Alipay < /a > do not have to pay the bill. < /strong > /p >
< p > Alipay's 20G information has been leaked. Perhaps your name and address are in it. Have you ever thought about the claim? < /p >
According to the privacy rules issued by Alipay, Alipay promised to "strive to take various reasonable physical, electronic and management security measures to protect your information, so that your information will not be leaked, damaged or lost, including, but not limited to, SSL, encrypted information storage, access control of data centers." P "The staff or outsourced personnel who may be exposed to your information have also taken strict management, including, but not limited to, different authority control according to their posts, signing secret agreements with them, monitoring their operation and other measures." In fact, it is not easy to claim compensation from Alipay. < /p >
< p > analysis of the executive director of Shanghai Institute of Finance and Law: "how to measure the size of the liability for breach of contract and how to compensate it, there is no definite data under the existing legal framework. More importantly, it is not yet clear which Alipay users' information has been leaked, and the leaked information can not be made known to users. The plaintiff is unable to pursue, and of course, he can not claim liability for breach of contract. < /p >
In the massive website information leakage incident in December 2011, Alipay was among "P", but it was rarely mentioned again after short notice. The lawyer reminded consumers: "when personal consumers encounter such incidents, if you determine their property safety losses, you can directly find Alipay company for compensation. Second, we can find Alipay's superior departments, such as the Hangzhou communications authority, to coordinate. Third, we can take legal measures to prosecute Alipay. " < /p >
< p > < strong > expert: < /strong > < /p >.
< p > < strong > correlation < a href= "http://www.91se91.com/news/index_q.asp > > legal supervision < /a > to be developed and improved < /strong > /p >
< p > user data network leak is not the Alipay family. Massive incidents of personal information such as QQ groups, insurance companies and hotel occupancy have occurred. China's third party network payment security research report released by Analysys International shows that 54% of users do not use network payment for safety concerns. In the process of online payment, capital loss is caused, accounting for 33.9% of the loss of funds caused by theft of passwords, and become the number one enemy of the third party payment. In fact, in the era of big data, the value of data to marketing is changing. However, the relevant legal supervision is often absent. Even in the global scope, there are still many places to develop and perfect data confidentiality security policies and standards. < /p >
< p > Zhang Tianxiang, lawyer of Guangdong Hui Gang law firm, believes that with the rise of mobile end payment and Internet finance, such cases will enter a high incidence period. In fact, users are in a weak position in this process and are hard to guard against. It is understood that, according to the twenty-fifth provision of the Interim Measures for the management of online commodity trading and related services, the operators providing network trading platform services shall take necessary measures to protect the safety of data and information related to business secrets or personal information of the operators. The parties may not disclose, transfer, lease or sell the list of parties involved in transactions, transaction records, and other data that involve operator's business secret or consumer's personal information without the consent of the parties involved in the transaction. "Third Even if it violates, it only needs to pay a fine of less than 10 thousand yuan, which is "sprinkled water" for enterprises. < /p >