6TB of Fable data sold with leaked SSH keys, cloud creds tied to Xiaomi, Huawei, NIO

teortaxesTex · x · 2026-09-11

Security researcher Chaofan Shou claims he bought 6TB of Fable trajectories from a major Chinese LLM reseller — and the dump contained far more than chat logs: SSH keys, VPN configs, Alibaba Cloud keys, and GitLab tokens leaked through routers.

• The data alone would be enough to compromise 7 Chinese/CIS government agencies and 19 large Chinese companies, including Xiaomi, Huawei, NIO, and MiniMax
• Screenshots show Git/GitLab endpoints of Sangfor, NIO, Bilibili, Xiaomi, USTC, and Zhejiang Lab (tokens redacted)
• Poster teortaxesTex quips the reseller likely also sold it to Chinese LLM labs, meaning the leaked keys will get SFT'd on and regurgitated by lesser models

The incident is a stark reminder of the credential-management and data-security risks in the LLM proxy/reseller ecosystem.

Related event: Researcher Buys 6TB Leaked Dataset from Chinese LLM Router, Containing Credentials of Xiaomi, Huawei and Others(5 posts)→

Original post →

More from Models

• ToneBench eval: GPT-6.1 Terra ranks #23 at writing — cheaper, not better, than GPT-5.6 Terra — OnlyProggingForFun · 2026-10-28
• Cursor user complains it silently switches to Grok, which fails basic tasks — kylegawley · 2026-10-28
• Musk says Grok Bot keeps improving, calls Vault feature a game changer — beffjezos · 2026-10-28
• Claude refuses to gather legitimately public information, sparking guardrail backlash — mkheck · 2026-10-28
• DesignArena launches Code to Video Arena: models direct 15-45s films purely in code — yshan2u · 2026-10-28
• ChatGPT's 'yes, but with an important clarification' often precedes pure nonsense — Crixusgannicus · 2026-10-28

Models channel →