State-Linked Infrastructure Operators Penalized in Xinjiang Cybersecurity Crackdown

Authorities in northwestern China have penalized several critical infrastructure operators and state contractors for failing to protect sensitive user data, highlighting Beijing’s intensifying nationwide enforcement of data security regulations. The cybersecurity police in Xinjiang disclosed to local Chinese media multiple enforcement actions targeting utilities, government contractors, and industrial firms that neglected statutory digital defenses. In one case, a water supply company in the Ili Kazakh Autonomous Prefecture faced administrative penalties after an insider illegally exported more than 10,000 user payment records to real estate brokers. Investigators discovered the utility suffered from deficient internal controls, unencrypted sensitive data, and a systemic…