6TB dataset from a Chinese LLM router allegedly exposes SSH keys of Xiaomi, Huawei, NIO and gov entities

PMinervini · x · 2026-09-11

Developer @shoucccc claims he bought a 6TB "Fable" dataset from a top Chinese LLM router for a five-figure sum — and found it packed with credentials customers had sent through the service: SSH keys, VPN configs, Aliyun keys, and GitLab tokens.

• He says the data alone would let him take over 7 Chinese/CIS government entities and 19 major Chinese firms including Xiaomi, Huawei, NIO, and Minimax
• The core risk: routing internal traffic through third-party LLM services can leak credentials and infrastructure configs alongside requests
• Single-source claim, unverified — but it spotlights a blind spot in LLM router/gateway data security

Related event: Researcher Buys 6TB Leaked Dataset from Chinese LLM Router, Containing Credentials of Xiaomi, Huawei and Others(5 posts)→

Original post →

More from Safety

• AI cyber-wreckage noise far outstrips actual damage so far, argues new analysis — timigod · 2026-10-28
• OpenAI to co-host webinar on php2shell disclosure and AI-driven vulnerability discovery — gdb · 2026-10-28
• Rust and Verus shrink the search space for AI-driven CVE hunting, but does it ever end? — jd_pressman · 2026-10-28
• Anthropic pushes back on Slack breach rumors but admits security must be reinvented yearly — logangraham · 2026-10-28
• jackson-databind hit with CVSS 9.8 flaw CVE-2026-110879, bypassing prior fix — Kyrannio · 2026-10-28
• Archil founder: AI reverse-engineering is making it unsafe to ship binaries to customers — RexDouglass · 2026-10-28

Safety channel →