Czech Warning Highlights China Stealing User Data

The Czech Republic’s National Cyber and Information Security Agency, NÚKIB, warned in a public advisory that certain products and services are sending data back to the People’s Republic of China, with the notice stressing transfers of system and user data to China and the remote administration of technical assets. The warning highlights the risk that data could be misused by state, military, or political interests if it leaves Czech borders.

Earlier this year, the Czech government accused China of targeting its critical infrastructure via a threat actor attributed as APT 31, an assertion the PRC has called groundless, while the US, EU and NATO condemned the alleged activities. The article notes ongoing concerns around private companies sending data to China, including references to TikTok and other private networking firms tied to Chinese cyber threat activity.

Analysts quoted in the piece describe a broader pattern of data collection and emphasise that laws such as China’s National Security Law could compel data sharing, increasing the risk to organisations and individuals whose systems transfer data to or are remotely managed from those territories. 4 September 2025