Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Application Security

Executive Fired From TikTok’s Chinese Owner Says Beijing Had Access to App Data in Termination Suit

Former ByteDance executive said China government officials maintained access to all TikTok data, including information stored in the United States.

TikTok ban in US

A former executive fired from TikTok’s parent company ByteDance made a raft of accusations against the tech giant Friday, including that it stole content from competitors like Instagram and Snapchat, and served as a “propaganda tool” for the Chinese government by suppressing or promoting content favorable to the country’s interests.

The allegations were made in a complaint Friday by Yintao Yu, the head of engineering for ByteDance’s U.S. operations from August 2017 to November 2018, as part of a wrongful termination lawsuit filed earlier this month in San Francisco Superior Court. Yu claims he was fired for disclosing “wrongful conduct” he saw at the company.

In the complaint, Yu alleges the Chinese government monitored ByteDance’s work from within its Beijing headquarters and provided guidance on advancing “core communist values.”

Yu said government officials had the ability to turn off the Chinese version of ByteDance’s apps, and maintained access to all company data, including information stored in the United States.

ByteDance did not immediately respond to a request for comment.

The allegations come as TikTok – one of the most popular social media apps in the U.S. — faces heightened scrutiny in Washington and some states about whether it can keep American data safe from the Chinese government. The Biden administration has threatened to ban the app if its Chinese owners don’t sell their stakes.

Advertisement. Scroll to continue reading.

TikTok maintains it never gave U.S. user data to China’s government and wouldn’t do so if it was asked. In an effort to avoid a ban, it also wants to store U.S. user data on servers operated by the software giant Oracle.

In another attention-grabbing part of the lawsuit, Yu alleges he observed ByteDance promoting content that expressed hatred for Japan on Douyin, the Chinese version of TikTok. At another time, he said the company demoted content that showed support for the protests in Hong Kong while promoting content that expressed criticism of the protests.

Yu said ByteDance developed software that would scrape user content from competitors’ websites without permission. He alleges the company would then repost the content on its own websites – including TikTok – to attract more engagement from users.

Yu said a fellow TikTok executive in charge of the video-sharing app’s algorithm waved off his concerns. At some point, Yu said the company modified the program, but continued to scrape data from U.S. users when they were abroad.

The former executive also alleges the company created fake users to boost its engagement metrics, including by programming them to “like” and “follow” real accounts.

Yu is seeking punitive damage, lost earnings and 220,000 ByteDance shares that had not vested by the time he was fired.

Written By

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Today’s attackers are no longer breaking in — they’re logging in. Join this live webinar as we break down the modern identity attack chain and examine how recent breaches exploited weaknesses in authentication, identity verification, and access management processes.

Register

AI has accelerated both sides of the fight. Adversaries are weaponizing vulnerabilities faster, while defenders are racing to ship detections and configurations. Join this live webinar as we explore how to prove your controls actually hold against new threats, map your security maturity, and unite breach simulation with automated pentesting into a single, coordinated program.

Register

People on the Move

Stephen Garcia has been named Chief Information Security Officer at BreachRx.

Kasper Lindgaard has been appointed Vice President of Security Strategy at CoreView.

Chaim Mazal has been named Chief Information Security Officer at GitLab.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.