Knownsec leak claims (China)
Alleged: Reported or claimed; not established in the public record.
In November 2025 data was reported to have leaked from the Chinese cybersecurity contractor Knownsec. Vendors described a collection of internal files and said a copy posted to GitHub was removed.
Confirmed
The two vendor reports agree that the leak was reported and that the GitHub copy was taken down. DomainTools' January 2026 analysis says it was based on 65 screenshots.
Claimed, disputed or not established
Authenticity was not independently confirmed in the sources opened. The headline figure of more than 12,000 files comes from a vendor's page and is unverified.
Reported impact
Treated by vendors as another sign of China's contractor-driven cyber ecosystem.
Source strength: Both sources are vendors; one is a marketing page and the other relies on 65 screenshots. No mainstream outlet was opened.
Sources (opened in a new tab)
- KELA: alleged Knownsec data leak ↗https://www.kelacyber.com/resources/research/alleged-knownsec-data-leak/
- DomainTools: the Knownsec leak ↗https://dti.domaintools.com/research/the-knownsec-leak-yet-another-leak-of-chinas-contractor-driven-cyber-espionage-ecosystem
Connected
- Related leaks: i-Soon leak: a Chinese hacking contractor
- Case board · Timeline (2025) · Document vault · How we verify leaks
This page describes and cites public reporting. It does not host or link to leaked files, and it names no private individuals.