l{"id":1217844,"date":"2023-04-21T17:56:49","date_gmt":"2023-04-21T16:56:49","guid":{"rendered":"https:\/\/www.businesstelegraph.co.uk\/security-failures-at-tiktoks-virginia-data-centers-from-forbes\/"},"modified":"2023-04-21T17:56:49","modified_gmt":"2023-04-21T16:56:49","slug":"security-failures-at-tiktoks-virginia-data-centers-from-forbes","status":"publish","type":"post","link":"https:\/\/www.businesstelegraph.co.uk\/security-failures-at-tiktoks-virginia-data-centers-from-forbes\/","title":{"rendered":"Security Failures At TikTok&#039;s Virginia Data Centers, From &#8230; &#8211; Forbes"},"content":{"rendered":"<p> <script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script>\r\n<!-- newscabal uk text -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:inline-block;width:728px;height:90px\"\r\n     data-ad-client=\"ca-pub-8162386273903324\"\r\n     data-ad-slot=\"3688094655\"><\/ins>\r\n<script>\r\n(adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script><br \/>\n<\/p>\n<div>\n<h2 class=\"subhead-embed color-accent bg-base font-accent font-size text-align\">Other security issues at the sites have included unattended boxes of hard drives, illicit crypto mining, and a sanctioned supplier.<\/h2>\n<hr class=\"embed-base rule-embed color-accent border-solid weight-light\"\/>\n<p><abbr class=\"drop-cap color-accent font-accent\">F<\/abbr><strong>or years, TikTok<\/strong> has told lawmakers that the private data of its U.S. users is secured \u2014 and safe from potential influence or exfiltration \u2014 in a cluster of data centers located in Northern Virginia.<\/p>\n<p>But interviews with seven current and former employees and more than 60 documents, photos and videos from the data centers reveal that the centers have faced security vulnerabilities ranging from unmarked flash drives plugged into servers to unescorted visitors to boxes of hard drives left unattended in hallways. Sources suggest that these challenges are the result of TikTok trying to grow its data storage capacity very quickly, and sometimes cutting corners along the way.<\/p>\n<p>Documents, photos, and interviews also suggest that TikTok\u2019s data center operations are still tightly enmeshed with ByteDance\u2019s business in China. Among other suppliers, the data centers use servers produced by Inspur, a company that <a href=\"https:\/\/www.bloomberg.com\/news\/articles\/2020-06-24\/pentagon-names-20-chinese-firms-it-says-are-military-controlled\" target=\"_blank\" class=\"color-link\" title=\"https:\/\/www.bloomberg.com\/news\/articles\/2020-06-24\/pentagon-names-20-chinese-firms-it-says-are-military-controlled\" rel=\"nofollow noopener noreferrer\" data-ga-track=\"ExternalLink:https:\/\/www.bloomberg.com\/news\/articles\/2020-06-24\/pentagon-names-20-chinese-firms-it-says-are-military-controlled\" aria-label=\"the Pentagon said\">the Pentagon said<\/a> in 2020 was controlled by the Chinese military and that the Commerce Department <a href=\"https:\/\/public-inspection.federalregister.gov\/2023-04558.pdf\" target=\"_blank\" class=\"color-link\" title=\"https:\/\/public-inspection.federalregister.gov\/2023-04558.pdf\" rel=\"nofollow noopener noreferrer\" data-ga-track=\"ExternalLink:https:\/\/public-inspection.federalregister.gov\/2023-04558.pdf\" aria-label=\"added to a sanctions list\">added to a sanctions list<\/a> last month. Documents also show that as recently as last week, server work orders were sent to data center technicians by Beijing ByteDance Technology Co., Ltd., a ByteDance subsidiary partially owned by the Chinese government, which TikTok has repeatedly insisted has no control over its operations.<\/p>\n<p><fbs-ad position=\"top\" progressive=\"\" ad-id=\"article-0-top\"\/><\/p>\n<p>These revelations come at a critical moment for TikTok, which is facing a <a href=\"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/03\/16\/fbi-doj-investigating-bytedance-tiktok-surveillance-journalists\/\" target=\"_self\" class=\"color-link\" title=\"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/03\/16\/fbi-doj-investigating-bytedance-tiktok-surveillance-journalists\/\" data-ga-track=\"InternalLink:https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/03\/16\/fbi-doj-investigating-bytedance-tiktok-surveillance-journalists\/\" aria-label=\"federal criminal investigation\" rel=\"noopener\">federal criminal investigation<\/a> for surveilling journalists (including this reporter) and a <a href=\"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/03\/16\/fbi-doj-investigating-bytedance-tiktok-surveillance-journalists\/?sh=2a7e61e3a6fc\" target=\"_self\" class=\"color-link\" title=\"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/03\/16\/fbi-doj-investigating-bytedance-tiktok-surveillance-journalists\/?sh=2a7e61e3a6fc\" data-ga-track=\"InternalLink:https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/03\/16\/fbi-doj-investigating-bytedance-tiktok-surveillance-journalists\/?sh=2a7e61e3a6fc\" aria-label=\"threat\" rel=\"noopener\">threat<\/a> from the Biden Administration that ByteDance must sell TikTok or face a full ban of the app in the U.S. A bipartisan coalition of lawmakers, along with the White House, have raised concerns that the Chinese government could use ByteDance\u2019s control over TikTok to exfiltrate valuable data about American citizens or influence domestic or international civic discourse. <em>(Disclosure: In a previous life, I held policy positions at Facebook and Spotify.)<\/em><\/p>\n<p>\u201cEach new story raises more concerns and provides additional examples of TikTok appearing to misrepresent its data security practices,\u201d said Senator Mark Warner, who has led a Senate effort to ban TikTok in recent months.<\/p>\n<blockquote class=\"embed-base quote-embed embed-40 bg-accent color-base font-accent font-size text-align\">\n<p>The data centers use servers produced by Inspur, a company that the Pentagon said in 2020 was controlled by the Chinese military.\n<\/p>\n<\/blockquote>\n<p>TikTok\u2019s rebuttal to these concerns \u2014 and the threat of a potential ban \u2014 is a proposal known as <a href=\"https:\/\/www.buzzfeednews.com\/article\/emilybakerwhite\/tiktok-project-texas-bytedance-user-data\" target=\"_blank\" class=\"color-link\" title=\"https:\/\/www.buzzfeednews.com\/article\/emilybakerwhite\/tiktok-project-texas-bytedance-user-data\" rel=\"nofollow noopener noreferrer\" data-ga-track=\"ExternalLink:https:\/\/www.buzzfeednews.com\/article\/emilybakerwhite\/tiktok-project-texas-bytedance-user-data\" aria-label=\"Project Texas\">Project Texas<\/a>, under which TikTok would remove private U.S. user data from the Virginia servers and isolate it in a set of Texas-based data centers owned by Oracle. However, TikTok CEO Shou Zi Chew <a href=\"https:\/\/techpolicy.press\/transcript-tiktok-ceo-testifies-to-congress\/\" target=\"_blank\" class=\"color-link\" title=\"https:\/\/techpolicy.press\/transcript-tiktok-ceo-testifies-to-congress\/\" rel=\"nofollow noopener noreferrer\" data-ga-track=\"ExternalLink:https:\/\/techpolicy.press\/transcript-tiktok-ceo-testifies-to-congress\/\" aria-label=\"testified\">testified<\/a> before a House Committee last month that U.S. user data is still \u201csitting in our servers in Virginia\u201d today.<\/p>\n<p>In response to a detailed list of questions from <em>Forbes<\/em>, TikTok spokesperson Maureen Shanahan acknowledged using Inspur servers, but said TikTok had \u201cnot procured from that vendor for quite some time.\u201d Inspur has also worked with other major U.S. companies, including Microsoft, IBM and Intel. Inspur did not reply to a request for comment, nor did the Department of Commerce. The Department of Defense had not provided comment by press time.<\/p>\n<p>Shanahan said the work orders from Beijing ByteDance Technology Co. were \u201can artifact of a ticketing system,\u201d which \u201cdoes not provide any access to user data,\u201d and that TikTok began routing new U.S. user traffic to Oracle servers in June 2022. She also offered the following statement:<\/p>\n<p>\u201cIn the past several years, we&#8217;ve increased our investments in people, processes, and technology to help safeguard our community, including establishing a team dedicated to data center operations, maintenance, and compliance.\u201d<\/p>\n<p><fbs-ad position=\"topx\" progressive=\"\" ad-id=\"article-0-topx-1\"\/><\/p>\n<hr class=\"embed-base rule-embed color-accent border-solid weight-light\"\/>\n<h3 class=\"subhead3-embed color-body bg-base font-accent font-size text-align\"><sup><strong>Unmarked Flash Drives, Unsecured Servers And Unescorted Visitors<\/strong><\/sup><\/h3>\n<p><strong><abbr class=\"drop-cap color-accent font-accent\">L<\/abbr>ike many tech giants,<\/strong> TikTok rents space in large data centers in Northern Virginia. TikTok\u2019s data halls within these centers are managed in part by ByteDance and in part by contract workers from several data center management firms. (Two firms that work in the ByteDance centers did not reply to a request for comment.)<\/p>\n<p>In January 2023, TikTok\u2019s U.S. Data Security division \u2014 the new entity that, under Project Texas, will secure and provision access to U.S. user data \u2014 released a <a href=\"https:\/\/usds.tiktok.com\/delivering-on-our-us-data-governance\/\" target=\"_blank\" class=\"color-link\" title=\"https:\/\/usds.tiktok.com\/delivering-on-our-us-data-governance\/\" rel=\"nofollow noopener noreferrer\" data-ga-track=\"ExternalLink:https:\/\/usds.tiktok.com\/delivering-on-our-us-data-governance\/\" aria-label=\"blog post\">blog post<\/a> stating: \u201cOur Virginia data center includes physical and logical safety controls such as gated entry points, firewalls, and intrusion detection technologies.\u201d But seven current and former employees who spoke to <em>Forbes<\/em> \u2014 anonymously for fear of retribution from ByteDance or their contracting company \u2014 said that security at the sites is variable and lax.<\/p>\n<p>According to the employees, physical security systems vary by building, but most rely on a badge system. Company policy states that guests, including a regular rotation of delivery couriers, hardware vendors, electricians, and other professionals, must be escorted by an employee at all times. But in practice, according to four employees, that doesn\u2019t always happen. \u201cWe do not have time to watch them all,\u201d one said.<\/p>\n<blockquote class=\"embed-base quote-embed embed-36 bg-accent color-base font-accent font-size text-align\">\n<p>Four sources said they have seen unmarked, \u201cunticketed\u201d flash drives plugged into servers.\n<\/p>\n<\/blockquote>\n<p>The employees described multiple recordkeeping systems used by the company to track server and other hardware repair done in the centers, including five separate internal ticketing tools. All the employees said they also received work requests through ByteDance\u2019s workplace software, Lark.<\/p>\n<p>Three sources, though, told <em>Forbes<\/em> that they were aware of modifications made to servers that were not reflected in any ticketing system, and four said they have seen unmarked, \u201cunticketed\u201d flash drives plugged into servers. TikTok said these claims were inconsistent with the company\u2019s internal security monitoring.<\/p>\n<p><fbs-ad position=\"topx\" progressive=\"\" ad-id=\"article-0-topx-2\"\/><\/p>\n<p>Four sources also said that the company\u2019s degaussers \u2014 machines used to wipe and destroy old hard drives \u2014 were often broken or jammed, requiring staff to take drives to other data centers to be disposed of. A person who had been placed in this position said, \u201cAnyone with malicious intent could\u2019ve just taken them, and we wouldn\u2019t have known.\u201d (TikTok acknowledged having this issue in the past, but said it has since been addressed.)<\/p>\n<p>Photos provided by one source, who said they were taken in 2020, show hard drives left unattended in open boxes in the hallways of a Virginia data center. Details in the photos, including doors, floor tiles, ceiling tiles, wall paint, and server racks, match photos and videos provided by a second, unrelated source.<\/p>\n<p>Inadequate investment in data center security is an industry-wide problem, according to Sanjukta Das Smith, Chair of Management Science and Systems at the University of Buffalo School of Management and an expert on data center resourcing. In an interview, she said, \u201cMany times, security does tend to take a backseat, because in most client-facing interactions, the focus is more on the client\u2019s experience: how fast are things loading on their devices, and what are the aesthetics of that?\u201d<\/p>\n<p>Despite these systemic challenges, the practices described by TikTok employees at times diverged from industry norms described by Smith. For example, in the data centers she has visited, Smith said, \u201ceven if you have prior authorization, once you go through check-in, then it\u2019s not like someone is free to roam around. It\u2019s an escorted experience.\u201d But this is apparently not the case at TikTok\u2019s centers, where one source said, \u201cWe never really knew when these people were going to show up, they just showed up with a ticket and asked to be cut access, and someone would cut them access and they\u2019d go in and do whatever they do and then leave.\u201d<\/p>\n<p>Smith said she has never seen USB drives used in data centers, but that they would raise additional concerns, given how easy it is to install malicious software on them.<\/p>\n<p><fbs-ad position=\"topx\" progressive=\"\" ad-id=\"article-0-topx-3\"\/><\/p>\n<p>Bruce Schneier, a fellow at Harvard\u2019s Berkman Klein Center for Internet &amp; Technology and lecturer at the Harvard Kennedy School, cautioned against reading too far into any one unexplained occurrence. Analogizing to claims about voter fraud, he said, \u201cit\u2019s easy to find stuff that looks suspicious, but it\u2019s a little like saying we found boxes of votes we don\u2019t understand.\u201d<\/p>\n<p>Like Smith, Schneier noted that security problems are industry-wide. He mentioned Twitter, which he said had struggled with security because of its efforts to grow so quickly. As for TikTok, he said, \u201cI\u2019m sure there\u2019s negligence. Like any big tech company, they care about profits, and security is expensive.\u201d<\/p>\n<hr class=\"embed-base rule-embed color-accent border-solid weight-light\"\/>\n<h3 class=\"subhead3-embed color-body bg-base font-accent font-size text-align\"><sup><strong>Building Safety, Fire Hazards And Crypto Mining<\/strong><\/sup><\/h3>\n<p><strong><em>Forbes <\/em>reporting also<\/strong> uncovered other issues with the Virginia data centers. Sources raised concerns about building safety \u2014 three described being occasionally asked to work in buildings that were still under construction, and said that in some buildings, door alarms go off so frequently that they are meaningless. (TikTok said door alarms are investigated on an as-needed basis.)<\/p>\n<p>Photos and videos from inside the data centers also showed wooden pallets and cardboard boxes left by delivery couriers in the server rooms \u2014 a fire hazard when coupled with the occasional overheating server. Audio recordings of internal TikTok meetings note that heat in these data centers has been a problem before: In a September 2021 meeting, a Trust &amp; Safety director can be heard describing an instance in which the Virginia servers overheated and U.S. user data was routed to servers in Singapore until the issue could be fixed.<\/p>\n<blockquote class=\"embed-base quote-embed embed-35 bg-accent color-base font-accent font-size text-align\">\n<p>\u201cByteDance just didn\u2019t give a shit.\u201d\n<\/p>\n<\/blockquote>\n<hr class=\"embed-base rule-embed color-accent border-solid weight-light\"\/><fbs-ad position=\"topx\" progressive=\"\" ad-id=\"article-0-topx-4\"\/><\/p>\n<p>Six sources also all independently told <em>Forbes<\/em> they had heard of employees using the servers to mine cryptocurrency. TikTok said that this would be a violation of its policies.<\/p>\n<p>Smith, the management professor, emphasized how hard it can be to keep a massive data center secure. \u201cThe volume of interactions that an application like TikTok would be dealing with \u2014 millions of interactions, the vast majority of which are benign \u2014 it\u2019s a needle in a haystack problem that they\u2019re dealing with.\u201d She also noted that data centers often don\u2019t disclose all the protections they have in place, because doing so would give hackers a roadmap to surpassing them.<\/p>\n<p>Still, six of the employees said that security at TikTok\u2019s data centers was weaker than security at other data centers where they had worked.<\/p>\n<p>\u201cByteDance just didn\u2019t give a shit,\u201d said one source, noting that the company often sacrificed safety standards to get servers up and running more quickly. \u201cThey were just going forward as fast as they possibly can.\u201d<\/p>\n<p><fbs-ad position=\"topx\" progressive=\"\" ad-id=\"article-0-topx-5\"\/><\/p>\n<h4 class=\"subhead4-embed color-body bg-base font-accent font-size text-align\"><\/h4>\n<h4 class=\"subhead4-embed color-body bg-base font-accent font-size text-align\"><strong>MORE FROM FORBES<\/strong><\/h4>\n<p><a class=\"embed-base link-embed link-embed--long-title embed-18 color-body color-body-border\" href=\"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/03\/16\/fbi-doj-investigating-bytedance-tiktok-surveillance-journalists\/\" target=\"_blank\" rel=\"noopener noreferrer\" data-ga-track=\"forbesEmbedly:https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/03\/16\/fbi-doj-investigating-bytedance-tiktok-surveillance-journalists\/\" aria-label=\"The FBI And DOJ Are Investigating ByteDance's Use Of TikTok To Spy On Journalists\"><span class=\"link-embed__info\"><span class=\"link-embed__provider\">MORE FROM FORBES<\/span><span class=\"link-embed__title\">The FBI And DOJ Are Investigating ByteDance&#8217;s Use Of TikTok To Spy On Journalists<\/span><small class=\"link-embed__byline\">By <span class=\"link-embed__author\">Emily Baker-White<\/span><\/small><\/span><span class=\"link-embed__thumbnail-wrapper\"><span class=\"link-embed__thumbnail allow-inline-style\" style=\"background-image:url('https:\/\/i.embed.ly\/1\/image?url=https%3A%2F%2Fimageio.forbes.com%2Fspecials-images%2Fimageserve%2F641371303a2e250a656246a2%2F0x0.jpg%3Fformat%3Djpg%26crop%3D1538%2C864%2Cx0%2Cy0%2Csafe%26width%3D1200&amp;key=8804248494c144f5b4765c41f66c6ed5')\"\/><\/span><\/a><a class=\"embed-base link-embed embed-20 color-body color-body-border\" href=\"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2022\/12\/22\/tiktok-tracks-forbes-journalists-bytedance\/\" target=\"_blank\" rel=\"noopener noreferrer\" data-ga-track=\"forbesEmbedly:https:\/\/www.forbes.com\/sites\/emilybaker-white\/2022\/12\/22\/tiktok-tracks-forbes-journalists-bytedance\/\" aria-label=\"EXCLUSIVE: TikTok Spied On Forbes Journalists\"><span class=\"link-embed__info\"><span class=\"link-embed__provider\">MORE FROM FORBES<\/span><span class=\"link-embed__title\">EXCLUSIVE: TikTok Spied On Forbes Journalists<\/span><small class=\"link-embed__byline\">By <span class=\"link-embed__author\">Emily Baker-White<\/span><\/small><\/span><span class=\"link-embed__thumbnail-wrapper\"><span class=\"link-embed__thumbnail allow-inline-style\" style=\"background-image:url('https:\/\/i.embed.ly\/1\/image?url=https%3A%2F%2Fimageio.forbes.com%2Fspecials-images%2Fimageserve%2F63a4af573d1eb6def1c8a814%2F0x0.jpg%3Fformat%3Djpg%26width%3D1200&amp;key=8804248494c144f5b4765c41f66c6ed5')\"\/><\/span><\/a><a class=\"embed-base link-embed embed-22 color-body color-body-border\" href=\"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/02\/14\/how-a-tiktok-ban-would-work-and-how-tiktok-could-fight-back\/\" target=\"_blank\" rel=\"noopener noreferrer\" data-ga-track=\"forbesEmbedly:https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/02\/14\/how-a-tiktok-ban-would-work-and-how-tiktok-could-fight-back\/\" aria-label=\"How A TikTok Ban Would Work - And How TikTok Could Fight Back\"><span class=\"link-embed__info\"><span class=\"link-embed__provider\">MORE FROM FORBES<\/span><span class=\"link-embed__title\">How A TikTok Ban Would Work &#8211; And How TikTok Could Fight Back<\/span><small class=\"link-embed__byline\">By <span class=\"link-embed__author\">Emily Baker-White<\/span><\/small><\/span><span class=\"link-embed__thumbnail-wrapper\"><span class=\"link-embed__thumbnail allow-inline-style\" style=\"background-image:url('https:\/\/i.embed.ly\/1\/image?url=https%3A%2F%2Fimageio.forbes.com%2Fspecials-images%2Fimageserve%2F63ead348e4c8ae915b394743%2F0x0.jpg%3Fformat%3Djpg%26crop%3D1920%2C1080%2Cx0%2Cy0%2Csafe%26width%3D1200&amp;key=8804248494c144f5b4765c41f66c6ed5')\"\/><\/span><\/a><a class=\"embed-base link-embed embed-24 color-body color-body-border\" href=\"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/01\/20\/tiktoks-secret-heating-button-can-make-anyone-go-viral\/\" target=\"_blank\" rel=\"noopener noreferrer\" data-ga-track=\"forbesEmbedly:https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/01\/20\/tiktoks-secret-heating-button-can-make-anyone-go-viral\/\" aria-label=\"TikTok's Secret 'Heating' Button Can Make Anyone Go Viral\"><span class=\"link-embed__info\"><span class=\"link-embed__provider\">MORE FROM FORBES<\/span><span class=\"link-embed__title\">TikTok&#8217;s Secret &#8216;Heating&#8217; Button Can Make Anyone Go Viral<\/span><small class=\"link-embed__byline\">By <span class=\"link-embed__author\">Emily Baker-White<\/span><\/small><\/span><span class=\"link-embed__thumbnail-wrapper\"><span class=\"link-embed__thumbnail allow-inline-style\" style=\"background-image:url('https:\/\/i.embed.ly\/1\/image?url=https%3A%2F%2Fimageio.forbes.com%2Fspecials-images%2Fimageserve%2F63cab9d914fa81852e766ebe%2F0x0.jpg%3Fformat%3Djpg%26width%3D1200&amp;key=8804248494c144f5b4765c41f66c6ed5')\"\/><\/span><\/a><a class=\"embed-base link-embed link-embed--long-title embed-26 color-body color-body-border\" href=\"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2022\/11\/30\/tiktok-chinese-state-media-divisive-politics\/\" target=\"_blank\" rel=\"noopener noreferrer\" data-ga-track=\"forbesEmbedly:https:\/\/www.forbes.com\/sites\/emilybaker-white\/2022\/11\/30\/tiktok-chinese-state-media-divisive-politics\/\" aria-label=\"On TikTok, Chinese State Media Pushes Divisive Videos About U.S. Politicians\"><span class=\"link-embed__info\"><span class=\"link-embed__provider\">MORE FROM FORBES<\/span><span class=\"link-embed__title\">On TikTok, Chinese State Media Pushes Divisive Videos About U.S. Politicians<\/span><small class=\"link-embed__byline\">By <span class=\"link-embed__author\">Emily Baker-White<\/span><\/small><\/span><span class=\"link-embed__thumbnail-wrapper\"><span class=\"link-embed__thumbnail allow-inline-style\" style=\"background-image:url('https:\/\/i.embed.ly\/1\/image?url=https%3A%2F%2Fimageio.forbes.com%2Fspecials-images%2Fimageserve%2F6387b40a49ba492417c8a8be%2F0x0.jpg%3Fformat%3Djpg%26crop%3D1920%2C1080%2Cx0%2Cy0%2Csafe%26width%3D1200&amp;key=8804248494c144f5b4765c41f66c6ed5')\"\/><\/span><\/a>\n<\/div>\n<p><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script>\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block; text-align:center;\"\r\n     data-ad-layout=\"in-article\"\r\n     data-ad-format=\"fluid\"\r\n     data-ad-client=\"ca-pub-8162386273903324\"\r\n     data-ad-slot=\"7859258044\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script><br \/>\n<br \/><a href=\"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/04\/21\/security-failures-tiktok-virginia-data-centers-unescorted-visitors-flash-drives\/\">READ SOURCE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Other security issues at the sites have included unattended boxes of hard drives, illicit crypto mining, and a sanctioned supplier. For years, TikTok has told lawmakers that the private data of its U.S. users is secured \u2014 and safe from potential influence or exfiltration \u2014 in a cluster of data centers located in Northern Virginia. [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":1217845,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"_oct_exclude_from_cache":false,"footnotes":""},"categories":[53],"tags":[],"class_list":["post-1217844","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.8 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Security Failures At TikTok&#039;s Virginia Data Centers, From ... - Forbes - Business Telegraph<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/04\/21\/security-failures-tiktok-virginia-data-centers-unescorted-visitors-flash-drives\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Security Failures At TikTok&#039;s Virginia Data Centers, From ... - Forbes - Business Telegraph\" \/>\n<meta property=\"og:description\" content=\"Other security issues at the sites have included unattended boxes of hard drives, illicit crypto mining, and a sanctioned supplier. For years, TikTok has told lawmakers that the private data of its U.S. users is secured \u2014 and safe from potential influence or exfiltration \u2014 in a cluster of data centers located in Northern Virginia. [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/04\/21\/security-failures-tiktok-virginia-data-centers-unescorted-visitors-flash-drives\/\" \/>\n<meta property=\"og:site_name\" content=\"Business Telegraph\" \/>\n<meta property=\"article:published_time\" content=\"2023-04-21T16:56:49+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/04\/Security-Failures-At-TikTok039s-Virginia-Data-Centers-From-Forbes.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"675\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"businesstelegraph\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"businesstelegraph\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/04\/21\/security-failures-tiktok-virginia-data-centers-unescorted-visitors-flash-drives\/#article\",\"isPartOf\":{\"@id\":\"http:\/\/www.businesstelegraph.co.uk\/security-failures-at-tiktoks-virginia-data-centers-from-forbes\/\"},\"author\":{\"name\":\"businesstelegraph\",\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/#\/schema\/person\/0a3a6a0f58402f1f2af94e02d0987b78\"},\"headline\":\"Security Failures At TikTok&#039;s Virginia Data Centers, From &#8230; &#8211; Forbes\",\"datePublished\":\"2023-04-21T16:56:49+00:00\",\"dateModified\":\"2023-04-21T16:56:49+00:00\",\"mainEntityOfPage\":{\"@id\":\"http:\/\/www.businesstelegraph.co.uk\/security-failures-at-tiktoks-virginia-data-centers-from-forbes\/\"},\"wordCount\":1824,\"publisher\":{\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/04\/21\/security-failures-tiktok-virginia-data-centers-unescorted-visitors-flash-drives\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/04\/Security-Failures-At-TikTok039s-Virginia-Data-Centers-From-Forbes.jpg\",\"articleSection\":[\"security\"],\"inLanguage\":\"en-GB\"},{\"@type\":\"WebPage\",\"@id\":\"http:\/\/www.businesstelegraph.co.uk\/security-failures-at-tiktoks-virginia-data-centers-from-forbes\/\",\"url\":\"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/04\/21\/security-failures-tiktok-virginia-data-centers-unescorted-visitors-flash-drives\/\",\"name\":\"Security Failures At TikTok&#039;s Virginia Data Centers, From ... - Forbes - Business Telegraph\",\"isPartOf\":{\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/04\/21\/security-failures-tiktok-virginia-data-centers-unescorted-visitors-flash-drives\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/04\/21\/security-failures-tiktok-virginia-data-centers-unescorted-visitors-flash-drives\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/04\/Security-Failures-At-TikTok039s-Virginia-Data-Centers-From-Forbes.jpg\",\"datePublished\":\"2023-04-21T16:56:49+00:00\",\"dateModified\":\"2023-04-21T16:56:49+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/04\/21\/security-failures-tiktok-virginia-data-centers-unescorted-visitors-flash-drives\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/04\/21\/security-failures-tiktok-virginia-data-centers-unescorted-visitors-flash-drives\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/04\/21\/security-failures-tiktok-virginia-data-centers-unescorted-visitors-flash-drives\/#primaryimage\",\"url\":\"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/04\/Security-Failures-At-TikTok039s-Virginia-Data-Centers-From-Forbes.jpg\",\"contentUrl\":\"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/04\/Security-Failures-At-TikTok039s-Virginia-Data-Centers-From-Forbes.jpg\",\"width\":1200,\"height\":675},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/04\/21\/security-failures-tiktok-virginia-data-centers-unescorted-visitors-flash-drives\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.businesstelegraph.co.uk\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security Failures At TikTok&#039;s Virginia Data Centers, From &#8230; &#8211; Forbes\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/#website\",\"url\":\"https:\/\/www.businesstelegraph.co.uk\/\",\"name\":\"Business Telegraph UK\",\"description\":\"business, tech and industry news\",\"publisher\":{\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.businesstelegraph.co.uk\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/#organization\",\"name\":\"Business Telegraph UK\",\"url\":\"https:\/\/www.businesstelegraph.co.uk\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2024\/03\/business-telegraph-LOGO.png\",\"contentUrl\":\"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2024\/03\/business-telegraph-LOGO.png\",\"width\":500,\"height\":177,\"caption\":\"Business Telegraph UK\"},\"image\":{\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.businesstelegraph.co.uk\/#\/schema\/person\/0a3a6a0f58402f1f2af94e02d0987b78\",\"name\":\"businesstelegraph\",\"url\":\"https:\/\/www.businesstelegraph.co.uk\/author\/businesstelegraph\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Security Failures At TikTok&#039;s Virginia Data Centers, From ... - Forbes - Business Telegraph","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/04\/21\/security-failures-tiktok-virginia-data-centers-unescorted-visitors-flash-drives\/","og_locale":"en_GB","og_type":"article","og_title":"Security Failures At TikTok&#039;s Virginia Data Centers, From ... - Forbes - Business Telegraph","og_description":"Other security issues at the sites have included unattended boxes of hard drives, illicit crypto mining, and a sanctioned supplier. For years, TikTok has told lawmakers that the private data of its U.S. users is secured \u2014 and safe from potential influence or exfiltration \u2014 in a cluster of data centers located in Northern Virginia. [&hellip;]","og_url":"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/04\/21\/security-failures-tiktok-virginia-data-centers-unescorted-visitors-flash-drives\/","og_site_name":"Business Telegraph","article_published_time":"2023-04-21T16:56:49+00:00","og_image":[{"width":1200,"height":675,"url":"http:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/04\/Security-Failures-At-TikTok039s-Virginia-Data-Centers-From-Forbes.jpg","type":"image\/jpeg"}],"author":"businesstelegraph","twitter_card":"summary_large_image","twitter_misc":{"Written by":"businesstelegraph","Estimated reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/04\/21\/security-failures-tiktok-virginia-data-centers-unescorted-visitors-flash-drives\/#article","isPartOf":{"@id":"http:\/\/www.businesstelegraph.co.uk\/security-failures-at-tiktoks-virginia-data-centers-from-forbes\/"},"author":{"name":"businesstelegraph","@id":"https:\/\/www.businesstelegraph.co.uk\/#\/schema\/person\/0a3a6a0f58402f1f2af94e02d0987b78"},"headline":"Security Failures At TikTok&#039;s Virginia Data Centers, From &#8230; &#8211; Forbes","datePublished":"2023-04-21T16:56:49+00:00","dateModified":"2023-04-21T16:56:49+00:00","mainEntityOfPage":{"@id":"http:\/\/www.businesstelegraph.co.uk\/security-failures-at-tiktoks-virginia-data-centers-from-forbes\/"},"wordCount":1824,"publisher":{"@id":"https:\/\/www.businesstelegraph.co.uk\/#organization"},"image":{"@id":"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/04\/21\/security-failures-tiktok-virginia-data-centers-unescorted-visitors-flash-drives\/#primaryimage"},"thumbnailUrl":"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/04\/Security-Failures-At-TikTok039s-Virginia-Data-Centers-From-Forbes.jpg","articleSection":["security"],"inLanguage":"en-GB"},{"@type":"WebPage","@id":"http:\/\/www.businesstelegraph.co.uk\/security-failures-at-tiktoks-virginia-data-centers-from-forbes\/","url":"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/04\/21\/security-failures-tiktok-virginia-data-centers-unescorted-visitors-flash-drives\/","name":"Security Failures At TikTok&#039;s Virginia Data Centers, From ... - Forbes - Business Telegraph","isPartOf":{"@id":"https:\/\/www.businesstelegraph.co.uk\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/04\/21\/security-failures-tiktok-virginia-data-centers-unescorted-visitors-flash-drives\/#primaryimage"},"image":{"@id":"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/04\/21\/security-failures-tiktok-virginia-data-centers-unescorted-visitors-flash-drives\/#primaryimage"},"thumbnailUrl":"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/04\/Security-Failures-At-TikTok039s-Virginia-Data-Centers-From-Forbes.jpg","datePublished":"2023-04-21T16:56:49+00:00","dateModified":"2023-04-21T16:56:49+00:00","breadcrumb":{"@id":"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/04\/21\/security-failures-tiktok-virginia-data-centers-unescorted-visitors-flash-drives\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/04\/21\/security-failures-tiktok-virginia-data-centers-unescorted-visitors-flash-drives\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/04\/21\/security-failures-tiktok-virginia-data-centers-unescorted-visitors-flash-drives\/#primaryimage","url":"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/04\/Security-Failures-At-TikTok039s-Virginia-Data-Centers-From-Forbes.jpg","contentUrl":"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2023\/04\/Security-Failures-At-TikTok039s-Virginia-Data-Centers-From-Forbes.jpg","width":1200,"height":675},{"@type":"BreadcrumbList","@id":"https:\/\/www.forbes.com\/sites\/emilybaker-white\/2023\/04\/21\/security-failures-tiktok-virginia-data-centers-unescorted-visitors-flash-drives\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.businesstelegraph.co.uk\/"},{"@type":"ListItem","position":2,"name":"Security Failures At TikTok&#039;s Virginia Data Centers, From &#8230; &#8211; Forbes"}]},{"@type":"WebSite","@id":"https:\/\/www.businesstelegraph.co.uk\/#website","url":"https:\/\/www.businesstelegraph.co.uk\/","name":"Business Telegraph UK","description":"business, tech and industry news","publisher":{"@id":"https:\/\/www.businesstelegraph.co.uk\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.businesstelegraph.co.uk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/www.businesstelegraph.co.uk\/#organization","name":"Business Telegraph UK","url":"https:\/\/www.businesstelegraph.co.uk\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.businesstelegraph.co.uk\/#\/schema\/logo\/image\/","url":"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2024\/03\/business-telegraph-LOGO.png","contentUrl":"https:\/\/www.businesstelegraph.co.uk\/wp-content\/uploads\/2024\/03\/business-telegraph-LOGO.png","width":500,"height":177,"caption":"Business Telegraph UK"},"image":{"@id":"https:\/\/www.businesstelegraph.co.uk\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.businesstelegraph.co.uk\/#\/schema\/person\/0a3a6a0f58402f1f2af94e02d0987b78","name":"businesstelegraph","url":"https:\/\/www.businesstelegraph.co.uk\/author\/businesstelegraph\/"}]}},"_links":{"self":[{"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/posts\/1217844","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/comments?post=1217844"}],"version-history":[{"count":0,"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/posts\/1217844\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/media\/1217845"}],"wp:attachment":[{"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/media?parent=1217844"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/categories?post=1217844"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.businesstelegraph.co.uk\/wp-json\/wp\/v2\/tags?post=1217844"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}